AWS Security ChangesHomeSearch

AWS opensearch-service documentation change

Service: opensearch-service · 2025-03-30 · Documentation low

File: opensearch-service/latest/developerguide/creating-opensearch-service-pipeline.md

Summary

Updated domain ARN patterns and role references in pipeline configuration examples

Security assessment

Changes involve placeholder standardization and example role updates. No security-related context or feature additions are present.

Diff

diff --git a/opensearch-service/latest/developerguide/creating-opensearch-service-pipeline.md b/opensearch-service/latest/developerguide/creating-opensearch-service-pipeline.md
index 0883a2166..f34013c87 100644
--- a/opensearch-service/latest/developerguide/creating-opensearch-service-pipeline.md
+++ b/opensearch-service/latest/developerguide/creating-opensearch-service-pipeline.md
@@ -77,5 +77,5 @@ To create your OpenSearch Ingestion pipeline, you must first create a pipeline r
-                "arn:aws:es:us-east-1:{account-id}:domain/{domain-name}/",
-                "arn:aws:es:us-east-1:{account-id}:domain/{domain-name}/_cat/indices",
-                "arn:aws:es:us-east-1:{account-id}:domain/{domain-name}/_search",
-                "arn:aws:es:us-east-1:{account-id}:domain/{domain-name}/_search/scroll",
-                "arn:aws:es:us-east-1:{account-id}:domain/{domain-name}/*/_search"
+                "arn:aws:es:region:account-id:domain/domain-name/",
+                "arn:aws:es:region:account-id:domain/domain-name/_cat/indices",
+                "arn:aws:es:region:account-id:domain/domain-name/_search",
+                "arn:aws:es:region:account-id:domain/domain-name/_search/scroll",
+                "arn:aws:es:region:account-id:domain/domain-name/*/_search"
@@ -88,2 +88,2 @@ To create your OpenSearch Ingestion pipeline, you must first create a pipeline r
-                "arn:aws:es:us-east-1:{account-id}:domain/{domain-name}/*/_search/point_in_time",
-                "arn:aws:es:us-east-1:{account-id}:domain/{domain-name}/*/_search/scroll"
+                "arn:aws:es:region:account-id:domain/domain-name/*/_search/point_in_time",
+                "arn:aws:es:region:account-id:domain/domain-name/*/_search/scroll"
@@ -96,2 +96,2 @@ To create your OpenSearch Ingestion pipeline, you must first create a pipeline r
-                "arn:aws:es:us-east-1:{account-id}:domain/{domain-name}/_search/point_in_time",
-                "arn:aws:es:us-east-1:{account-id}:domain/{domain-name}/_search/scroll"
+                "arn:aws:es:region:account-id:domain/domain-name/_search/point_in_time",
+                "arn:aws:es:region:account-id:domain/domain-name/_search/scroll"
@@ -143 +143 @@ In the following example, incoming data is conditionally routed to different Ope
-            hosts: [ "https://search-response-2xx.us-east-1.es.amazonaws.com" ]
+            hosts: [ "https://search-response-2xx.region.es.amazonaws.com" ]
@@ -145 +145 @@ In the following example, incoming data is conditionally routed to different Ope
-              sts_role_arn: "arn:aws:iam::123456789012:role/Example-Role"
+              sts_role_arn: "arn:aws:iam::region:role/pipeline-role"
@@ -151 +151 @@ In the following example, incoming data is conditionally routed to different Ope
-            hosts: [ "https://search-response-5xx.us-east-1.es.amazonaws.com" ]
+            hosts: [ "https://search-response-5xx.region.es.amazonaws.com" ]
@@ -153 +153 @@ In the following example, incoming data is conditionally routed to different Ope
-              sts_role_arn: "arn:aws:iam::123456789012:role/Example-Role"
+              sts_role_arn: "arn:aws:iam::123456789012:role/pipeline-role"