AWS Logs PutSubscriptionFilter Error 403: Credential Scoping Issue for Amazon ES

This error occurs when you are trying to create a CloudWatch Logs subscription filter for an Amazon Elasticsearch Service (Amazon ES) domain, but the credentials you are using are not correctly scoped to the 'es' service.\n\nTo resolve this issue, make sure you have the correct credentials that are scoped to the Amazon ES service. You can do this by following these steps:\n\n1. Open the Amazon Elasticsearch Service console.\n2. Select your domain.\n3. Click on the "Actions" button.\n4. Choose "Modify access policy".\n5. Ensure that the IAM role or user you are using has the necessary permissions to access the Amazon ES domain. If not, modify the access policy accordingly.\n6. Save the access policy changes.\n\nOnce you have the correct credentials, try running the aws logs put-subscription-filter command again with the updated credentials. This should resolve the 403 error.