AWS opensearch-service medium security documentation change

Service: opensearch-service · 2025-08-10 · Security-related medium

File: opensearch-service/latest/developerguide/osis-get-started.md

Summary

Updated account IDs and corrected IAM action from 'AttachPolicy' to 'AttachRolePolicy'

Security assessment

Critical correction of IAM action name in policy example (AttachPolicy -> AttachRolePolicy) to prevent policy failures, addressing potential misconfigurations

Diff

diff --git a/opensearch-service/latest/developerguide/osis-get-started.md b/opensearch-service/latest/developerguide/osis-get-started.md
index 91514d239..cc5d3df00 100644
--- a//opensearch-service/latest/developerguide/osis-get-started.md
+++ b//opensearch-service/latest/developerguide/osis-get-started.md
@@ -59 +59 @@ JSON
-                "arn:aws:iam::your-account-id:role/OpenSearchIngestion-PipelineRole"
+                "arn:aws:iam::111122223333:role/OpenSearchIngestion-PipelineRole"
@@ -64 +64 @@ JSON
-                "iam:AttachPolicy",
+                "iam:AttachRolePolicy",
@@ -96 +96 @@ JSON
-                "Resource": "arn:aws:es:us-east-1:your-account-id:domain/ingestion-domain"
+                "Resource": "arn:aws:es:us-east-1:111122223333:domain/ingestion-domain"
@@ -101 +101 @@ JSON
-                "Resource": "arn:aws:es:us-east-1:your-account-id:domain/ingestion-domain/*"
+                "Resource": "arn:aws:es:us-east-1:111122223333:domain/ingestion-domain/*"