AWS opensearch-service documentation change

Service: opensearch-service · 2025-08-28 · Documentation low

File: opensearch-service/latest/developerguide/s3-opensearch-vector-bucket-integration.md

Summary

Removed JSON policy examples for IAM permissions related to OpenSearch collection access, S3 vector access, and KMS decryption

Security assessment

The changes remove policy examples but do not indicate a security vulnerability or weakness. This appears to be documentation cleanup rather than addressing a security issue.

Diff

diff --git a/opensearch-service/latest/developerguide/s3-opensearch-vector-bucket-integration.md b/opensearch-service/latest/developerguide/s3-opensearch-vector-bucket-integration.md
index 7eda3c266..02036987a 100644
--- a//opensearch-service/latest/developerguide/s3-opensearch-vector-bucket-integration.md
+++ b//opensearch-service/latest/developerguide/s3-opensearch-vector-bucket-integration.md
@@ -130,38 +129,0 @@ If you choose to specify an existing role, verify that the role has the followin
-JSON
-    
-
-****
-    
-    
-    
-    {
-        "Version": "2012-10-17",
-        "Statement": [
-            {
-                "Sid": "allowAPIs",
-                "Effect": "Allow",
-                "Action": [ "aoss:APIAccessAll", "aoss:BatchGetCollection" ],
-                "Resource": [ "arn:aws:aoss:*:account-id:collection/collection-id" ]
-            },
-            {
-                "Sid": "allowSecurityPolicy",
-                "Effect": "Allow",
-                "Action": [
-                    "aoss:CreateSecurityPolicy",
-                    "aoss:UpdateSecurityPolicy",
-                    "aoss:GetSecurityPolicy"
-                ],
-                "Resource": "*",
-                "Condition":{
-                   "StringLike":{
-                      "aoss:collection": [ "collection-name" ]
-                    },
-                   "StringEquals": {
-                      "aws:ResourceAccount": [ "account-id" ]
-                   }
-                }
-            }
-        ]
-    }
-    
-
@@ -194,25 +155,0 @@ JSON
-JSON
-    
-
-****
-    
-    
-    
-    {
-        "Version": "2012-10-17",
-        "Statement": [
-            {
-                "Sid": "AllowS3VectorIndexAccess",
-                "Effect": "Allow",
-                "Action": [
-                   "s3vectors:ListVectors",
-                   "s3vectors:GetVectors"
-                ],
-                "Resource": [
-                    "arn:aws:s3vectors:region:account-id:bucket/bucket-name/index/index-name"
-                ]
-            }
-        ]
-    }
-    
-
@@ -221,28 +157,0 @@ JSON
-JSON
-    
-
-****
-    
-    
-    
-    {
-        "Version": "2012-10-17",
-        "Statement": [
-            {
-                "Sid": "allowS3VectorDecryptionOfCustomManagedKey",
-                "Effect": "Allow",
-                "Action": [
-                    "kms:Decrypt"
-                ],
-                "Resource": [ "arn:aws:kms:region:account-id:key/key-id" ],
-                "Condition": {
-                    "StringEquals": {
-                        "kms:ViaService": "s3vectors.region.amazonaws.com",
-                        "kms:EncryptionContext:aws:s3vectors:arn": "arn:aws:s3vectors:region:account-id:bucket/bucket-name"
-                     }
-                 }
-            }
-        ]
-    }
-    
-