Fine-grained access control offers additional ways of controlling access to data on Amazon Elasticsearch Service. After a resource-based access policy allows a request to reach a domain endpoint, fine-grained access control evaluates the user credentials and either authenticates the user or denies the request.