Docs: add access policies for OpenSearch Service and OpenSearch Serverless

[kevinwcyu]

This PR documents the minimal set of permissions required to use the opensearch datasource with OpenSearch Service and OpenSearch Serverless.

Fixes: #96

Changes:

• Updated references of Elasticsearch Service to OpenSearch Service
• Add different informational sections on access policies for OpenSearch Service and OpenSearch Serverless

Notes to reviewer:
I tested these permissions the default query for the datasource. I don't know if there are other permissions required depending on the query or some other settings.

References:

• Identity and Access Management in Amazon OpenSearch Service
• Overview of security in Amazon OpenSearch Serverless

[sarahzinger]

This looks good to me! Should we make a comment you think to say Open Search Serverless should be supported in Grafana 9.4 and above? cc @svennergr @gabor

[gabor]

@sarahzinger wrote:

Should we make a comment you think to say Open Search Serverless should be supported in Grafana 9.4 and above?

good idea!

hmm.. though..the question is, what should we say in the required-grafana-version setting in plugin.json : https://github.com/grafana/opensearch-datasource/blob/main/src/plugin.json#L30 ?

possibilities:

• set it to grafana9.4.0... if we do that, maybe we don't need to mention this in the README
• keep it as it is, and just accept that on older grafanas opensearch-serverless is just not going to work.

what do you think?

[kevinwcyu]

@sarahzinger wrote:

Should we make a comment you think to say Open Search Serverless should be supported in Grafana 9.4 and above?

good idea!

hmm.. though..the question is, what should we say in the required-grafana-version setting in plugin.json : https://github.com/grafana/opensearch-datasource/blob/main/src/plugin.json#L30 ?

possibilities:

• set it to grafana9.4.0... if we do that, maybe we don't need to mention this in the README
• keep it as it is, and just accept that on older grafanas opensearch-serverless is just not going to work.

what do you think?

I'm leaning towards keeping the required grafana version as-is because the opensearch-service part should still work for older versions and people who actively want to use opensearch-serverless will have to make the decision to upgrade grafana or not. Also looks like opensearch serverless was only recently released, so probably not many people using it just yet. So it seems like it would be lower friction for existing opensearch-service users if we leave the required version as-is for the moment.

[kevinwcyu]

@gabor I'm trying to tag the docs squad to review this, but they don't show up in reviewers dropdown for me. I think they need to be added as collaborators on this repo to show up in the reviewers dropdown. Would you be able to add them please?

[svennergr]

@gabor I'm trying to tag the docs squad to review this, but they don't show up in reviewers dropdown for me. I think they need to be added as collaborators on this repo to show up in the reviewers dropdown. Would you be able to add them please?

Done

[JStickler]

[Docs squad] LGTM