Opensearch pipeline ingestion, error no permissions for [cluster:monitor/state] and User

opensearch pipeline ingestion, Congiguration blueprints use "AWS-S3ScanPipeline"

In CloudWatch Log group, see this error:

2023-11-02T07:17:24.438 [log-pipeline-sink-worker-2-thread-1] WARN org.opensearch.dataprepper.plugins.sink.opensearch.OpenSearchSink - Failed to initialize OpenSearch sink with a retryable exception. org.opensearch.client.opensearch._types.OpenSearchException: Request failed: [security_exception] no permissions for [cluster:monitor/state] and User [name=arn:aws:iam::<Account id>:role/OpenSearchPipelineRole, backend_roles=[arn:aws:iam::<Account id>:role/OpenSearchPipelineRole], requestedTenant=null]

how to solve this problems: thanks