The current ES instance was linked to Cognito and IAM roles after a lot of trial and error, eventually leading to a temporary administrative user in the account. To actually test the use case before 6.1, this instance is going to be used from now on. But when we are in production for real, we might want to recreate a clean instance without any admin right, and double-check that the policies are correct.