diff --git a/iam.tf b/iam.tf
index 7f980cb..714cb7d 100644
--- a/iam.tf
+++ b/iam.tf
@@ -34,7 +34,9 @@ data "aws_iam_policy_document" "policy" {
     sid    = "ESPermission"
     effect = "Allow"
     actions = [
-      "es:*",
+      "es:ESHttpHead",
+      "es:ESHttpGet",
+      "es:ESHttpDelete",
     ]
     resources = [
       "arn:aws:es:${data.aws_region.current.name}:${data.aws_caller_identity.current.account_id}:domain/*",
diff --git a/variables.tf b/variables.tf
index 0971a03..a749805 100644
--- a/variables.tf
+++ b/variables.tf
@@ -34,7 +34,7 @@ variable "index_format" {
 }
 
 variable "python_version" {
-  default = "3.6"
+  default = "3.9"
 }
 
 variable "subnet_ids" {
@@ -44,7 +44,7 @@ variable "subnet_ids" {
 }
 
 variable "security_group_ids" {
-  description = "Addiational Security Ids To add."
+  description = "Additional Security Ids To add."
   type        = list(string)
   default     = []
 }