Error using access_policies() when creating OpenSearch domain

[rosscanning]

I am trying to create an OpenSearch domain with this command

    client
        .create_domain()
        .domain_name("test123")
        .engine_version("OpenSearch_1.3")
        // ... other options
        .access_policies(
            r#"{
                "Version": "2012-10-17",
                "Statement": [
                    {
                        "Effect": "Allow",
                        "Principal": { "AWS": "*" },
                        "Action": "es:*",
                        "Resource": "arn:aws:es:ap-southeast-2:000000000000:domain/test123/*"
                    }
                ]
            }"#,
        )
        .send()
        .await?

where "000000000000" is my account number.

The command fails with the error message "'accessPolicies' failed to satisfy constraint: Member must satisfy regular expression pattern: .*"

If I omit the access_policies() call, the command succeeds, but then of course I can't access the newly created domain :) If I then go in to the Console, find the new domain, and configure the above access policy, it works, and I can access the domain.

For reference, I'm trying to replicate in Rust what I normally do via the AWS Console. In the console, when I create an OpenSearch domain, under "Access Policy", I choose "Configure domain level access policy", then specify that same access policy (the JSON). This method works.

[rosscanning]

Ah, figured it out: the JSON string has to be all one line. Remove the EOLs, and it works.

I suppose the regex .* should have been a clue :)

[github-actions[bot]]

Hello! Reopening this discussion to make it searchable.