AWS opensearch-service documentation change
Summary
Updated release notes with revised entries for managed policy changes, instance type performance claims, direct query functionality renaming, version support details, and removal of concurrent segment search documentation
Security assessment
The managed policy update related to IAM Identity Center application access control represents security documentation, but there's no evidence of addressing a specific vulnerability. The Security Lake integration mention relates to security features but was already present in previous documentation.
Diff
diff --git a/opensearch-service/latest/developerguide/release-notes.md b/opensearch-service/latest/developerguide/release-notes.md index 8da3c1aab..874cb368a 100644 --- a//opensearch-service/latest/developerguide/release-notes.md +++ b//opensearch-service/latest/developerguide/release-notes.md @@ -41,10 +41,6 @@ Change| Description| Date -[The AmazonOpenSearchServiceRolePolicy managed policy was updated](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/ac-managed.html#ac-managed-updates)| We added a new statement to the policy. When Amazon OpenSearch Service assumes the `AWSServiceRoleForAmazonOpenSearchService` service-linked role, the new statement in the policy enables OpenSearch to update the access scope of any AWS IAM Identity Center application that is only managed by OpenSearch. | March 28, 2025 -[OR2 and OM2 instances for Amazon OpenSearch Service](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/limits.html)| Amazon OpenSearch Service now supports OR2 and OM2 instances. The new generation OR2 instance delivers up to 26% higher indexing throughput compared to previous OR1 instances and 70% over R7 instances. The new OM2 instance delivers up to 15% higher indexing throughput compared to OR1 instances and 66% over M7g instances in internal benchmarks.| March 25, 2025 -[Amazon OpenSearch Service zero-ETL integration with CloudWatch Logs and Security Lake](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/direct-query.html)| Amazon OpenSearch Service now supports _direct queries_ to query data in CloudWatch Logs and Security Lake.| December 1, 2024 -kNN indexes| From version 2.17, kNN indexes are eligible to be migrated to UltraWarm and Cold tiers.| November 13, 2024 -[OpenSearch concurrent segment search](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/version-migration.html)| Concurrent segment search is now set to default **auto** mode for domains on version 2.17. Also, there is now support to enable/disable concurrent search at an index level in the managed service. For more information, see [concurrent segment search](https://opensearch.org/docs/2.17/search-plugins/concurrent-segment-search/) and [concurrent segment search at the index or cluster level](https://opensearch.org/docs/2.17/search-plugins/concurrent-segment-search/#enabling-concurrent-segment-search-at-the-index-or-cluster-level).| November 13, 2024 -[OpenSearch 2.17 support](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/version-migration.html)| Amazon OpenSearch Service now supports OpenSearch version 2.17. This version includes all features that were part of versions 2.12 and 2.13. For more information, see the [2.17](https://github.com/opensearch-project/opensearch-build/blob/main/release-notes/opensearch-release-notes-2.17.0.md) and [2.17](https://github.com/opensearch-project/opensearch-build/blob/main/release-notes/opensearch-release-notes-2.17.0.md) release notes.| November 13, 2024 -Updated AmazonOpenSearchServiceRolePolicyData| Added AWS/OpenSearch as a new namespace type to the `cloudwatch:PutMetricData` action for `AmazonOpenSearchServiceRolePolicy`.| October 30, 2024 -Added CloudWatch namespaces| Added AWS/OpenSearch as a new namespace type to the `cloudwatch:PutMetricData` action on the [the service-linked role](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/slr-aos.html#slr-permissions) page.| October 30, 2024 -[OpenSearch 2.15 support](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/version-migration.html)| Amazon OpenSearch Service now supports OpenSearch version 2.15. This version includes all features that were part of versions 2.12 and 2.13. For more information, see the [2.12](https://github.com/opensearch-project/opensearch-build/blob/main/release-notes/opensearch-release-notes-2.15.0.md) and [2.13](https://github.com/opensearch-project/opensearch-build/blob/main/release-notes/opensearch-release-notes-2.15.0.md) release notes.| October 11, 2024 -[Update to service-linked role policy](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/ac-managed.html#AmazonOpenSearchServerlessServiceRolePolicy)| Adds the Sid `AllowAOSSCloudwatchMetrics` to the [the service-linked role](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/slr-aos.html#slr-permissions) policy `AmazonOpenSearchServerlessServiceRolePolicy`.| July 12, 2024 +[The AmazonOpenSearchServiceRolePolicy managed policy was updated](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/ac-managed.html#ac-managed-updates)| The policy enables OpenSearch to update the access scope of any AWS IAM Identity Center application that is only managed by OpenSearch. | March 28, 2025 +[OR2 and OM2 instances for Amazon OpenSearch Service](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/limits.html)| Amazon OpenSearch Service now supports OR2 and OM2 instances. In internal benchmarks, OR2 showed up to 26% better indexing throughput than OR1 and 70% over R7. OM2 showed up to 15% better than OR1 and 66% over M7g.| March 25, 2025 +[Direct query for CloudWatch Logs and Security Lake](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/direct-query.html)| Amazon OpenSearch Service now supports _direct queries_ to query data in CloudWatch Logs and Security Lake.| December 1, 2024 +k-NN indexes| Starting with OpenSearch version 2.17, you can move k-NN indexes to the UltraWarm and cold storage tiers.| November 13, 2024 +[OpenSearch 2.17 support](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/version-migration.html)| Amazon OpenSearch Service now supports OpenSearch version 2.17. This version includes all features that were part of versions 2.16 and 2.17. For more information, see the [2.16](https://github.com/opensearch-project/opensearch-build/blob/main/release-notes/opensearch-release-notes-2.16.0.md) and [2.17](https://github.com/opensearch-project/opensearch-build/blob/main/release-notes/opensearch-release-notes-2.17.0.md) release notes.| November 13, 2024 +[OpenSearch 2.15 support](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/version-migration.html)| Amazon OpenSearch Service now supports OpenSearch version 2.15. This version includes all features that were part of versions 2.14 and 2.15. For more information, see the [2.14](https://github.com/opensearch-project/opensearch-build/blob/main/release-notes/opensearch-release-notes-2.14.0.md) and [2.15](https://github.com/opensearch-project/opensearch-build/blob/main/release-notes/opensearch-release-notes-2.15.0.md) release notes.| October 11, 2024 @@ -52 +48 @@ Added CloudWatch namespaces| Added AWS/OpenSearch as a new namespace type to the -[Amazon OpenSearch Service zero-ETL integration with Amazon S3 ](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/direct-query-s3.html)| Amazon OpenSearch Service now supports _direct queries_ to query data in Amazon S3.| May 22, 2024 +[Direct queries](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/direct-query-s3.html)| Amazon OpenSearch Service now supports running queries directly on data stored in Amazon S3, without needing to ingest the data into an OpenSearch index.| May 22, 2024