AWS opensearch-service documentation change

Service: opensearch-service · 2025-08-28 · Documentation low

File: opensearch-service/latest/developerguide/configure-client-confluent-kafka.md

Summary

Removed EC2 network interface management policy example

Security assessment

Removal of network interface policy example reduces documentation about secure network configuration but doesn't address a specific vulnerability. Impacts guidance for network security controls.

Diff

diff --git a/opensearch-service/latest/developerguide/configure-client-confluent-kafka.md b/opensearch-service/latest/developerguide/configure-client-confluent-kafka.md
index 6bba69321..30fdff314 100644
--- a//opensearch-service/latest/developerguide/configure-client-confluent-kafka.md
+++ b//opensearch-service/latest/developerguide/configure-client-confluent-kafka.md
@@ -66,51 +65,0 @@ The following permission is needed to manage the network interface:
-JSON
-    
-
-****
-    
-    
-    
-    {
-        "Version": "2012-10-17",
-        "Statement": [
-            {
-                "Effect": "Allow",
-                "Action": [
-                    "ec2:AttachNetworkInterface",
-                    "ec2:CreateNetworkInterface",
-                    "ec2:CreateNetworkInterfacePermission",
-                    "ec2:DeleteNetworkInterface",
-                    "ec2:DeleteNetworkInterfacePermission",
-                    "ec2:DetachNetworkInterface",
-                    "ec2:DescribeNetworkInterfaces"
-                ],
-                "Resource": [
-                    "arn:aws:ec2:*::network-interface/*",
-                    "arn:aws:ec2:*::subnet/*",
-                    "arn:aws:ec2:*::security-group/*"
-                ]
-            },
-            {
-                "Effect": "Allow",
-                "Action": [
-                    "ec2:DescribeDhcpOptions",
-                    "ec2:DescribeRouteTables",
-                    "ec2:DescribeSecurityGroups",
-                    "ec2:DescribeSubnets",
-                    "ec2:DescribeVpcs",
-                    "ec2:Describe*"
-                ],
-                "Resource": "*"
-            },
-            { 
-                "Effect": "Allow",
-                "Action": [ "ec2:CreateTags" ],
-                "Resource": "arn:aws:ec2:*:*:network-interface/*",
-                "Condition": { 
-                   "StringEquals": { "aws:RequestTag/OSISManaged": "true" } 
-                } 
-            }
-        ]
-    }
-    
-