AWS Security ChangesHomeSearch

AWS opensearch-service documentation change

Service: opensearch-service · 2025-04-23 · Documentation low

File: opensearch-service/latest/developerguide/configure-client-otel.md

Summary

Generalized region configuration, removed STS role ARN references from pipeline examples, and updated blueprint documentation link

Security assessment

Modifications standardize examples by removing account-specific details but don't address security vulnerabilities or introduce security guidance. Role ARN removal suggests example simplification rather than security remediation.

Diff

diff --git a/opensearch-service/latest/developerguide/configure-client-otel.md b/opensearch-service/latest/developerguide/configure-client-otel.md
index 8be655f4e..3adbd23a1 100644
--- a//opensearch-service/latest/developerguide/configure-client-otel.md
+++ b//opensearch-service/latest/developerguide/configure-client-otel.md
@@ -11 +11 @@ Note the following:
-  * The `endpoint` value must include your pipeline endpoint. For example, `https://`pipeline-endpoint`.us-east-1.osis.amazonaws.com`.
+  * The `endpoint` value must include your pipeline endpoint. For example, `https://`pipeline-endpoint`.`us-east-1`osis.amazonaws.com`.
@@ -23 +23 @@ Note the following:
-        region: "us-east-1"
+        region: "region"
@@ -71,4 +71 @@ You can then configure an OpenSearch Ingestion pipeline like the following, whic
-              # IAM role that OpenSearch Ingestion assumes to access the domain sink   
-              sts_role_arn: "arn:aws:iam::account-id:role/pipeline-role"
-              region: "us-east-1"
-            
+              region: "region"      
@@ -86,3 +83 @@ You can then configure an OpenSearch Ingestion pipeline like the following, whic
-              # IAM role that the pipeline assumes to access the domain sink   
-              sts_role_arn: "arn:aws:iam::account-id:role/pipeline-role"
-              region: "us-east-1"
+              region: "region"
@@ -90 +85 @@ You can then configure an OpenSearch Ingestion pipeline like the following, whic
-For another example pipeline, see the preconfigured trace analytics blueprint. For more information, see [Using blueprints to create a pipeline](./pipeline-blueprint.html).
+For another example pipeline, see the preconfigured trace analytics blueprint. For more information, see [Working with blueprints](./pipeline-blueprint.html).