AWS opensearch-service documentation change
Summary
Added documentation for new pipeline role specification method in OpenSearch Ingestion (console field and CLI parameter) with related guide links
Security assessment
The change introduces improved security practices by separating pipeline role configuration from YAML to dedicated fields/parameters, which helps enforce role-based access control. However, there is no explicit mention of addressing a specific security vulnerability.
Diff
diff --git a/opensearch-service/latest/developerguide/release-notes.md b/opensearch-service/latest/developerguide/release-notes.md index b29360c63..f7d7fca4d 100644 --- a//opensearch-service/latest/developerguide/release-notes.md +++ b//opensearch-service/latest/developerguide/release-notes.md @@ -20,0 +21,11 @@ Change| Description| Date +New support for specifying pipeline roles in OpenSearch Ingestion| When you create or update pipeline in Amazon OpenSearch Ingestion, you no longer a specify pipeline role in a YAML format pipeline configuration. Instead, in the console, you specify the role in a new **Pipeline role** field. If you are using the AWS CLI, you use a new `--pipeline-role-arn` parameter. For more information, see the following topics: + + * [Setting up roles and users in Amazon OpenSearch Ingestion](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/pipeline-security-overview.html) + * [Creating Amazon OpenSearch Ingestion pipelines](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/creating-pipeline.html) + * [Tutorial: Ingesting data into a domain using Amazon OpenSearch Ingestion](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/ux-refresh-pipeline-role/osis-get-started.html) + * [Tutorial: Ingesting data into a collection using Amazon OpenSearch Ingestion](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/ux-refresh-pipeline-role/osis-serverless-get-started.html) + * [CreatePipeline](https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_osis_CreatePipeline.html) + * [UpdatePipeline](https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_osis_UpdatePipeline.html) + +| April 22, 2025 +New topic| The troubleshooting topic [Custom plugin installation fails due to version compatibility](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/handling-errors.html#troubleshooting-custom-plugins) address the steps to take when you encounter the error `PluginValidationFailureReason : The provided plugin could not be loaded`. This error is typically the result of a version mismatch between the plugin and the running OpenSearch instance.| April 21, 2025