AWS Security ChangesHomeSearch

AWS opensearch-service documentation change

Service: opensearch-service · 2025-10-16 · Documentation low

File: opensearch-service/latest/developerguide/createupdatedomains.md

Summary

Added new section 'Migrating to OpenSearch Service with Migration Assistant' detailing migration capabilities, scenarios, architecture, and implementation guidance

Security assessment

The changes introduce documentation for a migration tool without mentioning security vulnerabilities, patches, or security-specific configurations. While data migration tools inherently handle sensitive data, there's no explicit security context or mitigation of security issues described in the added content.

Diff

diff --git a/opensearch-service/latest/developerguide/createupdatedomains.md b/opensearch-service/latest/developerguide/createupdatedomains.md
index 59344d4e2..f9898cc03 100644
--- a//opensearch-service/latest/developerguide/createupdatedomains.md
+++ b//opensearch-service/latest/developerguide/createupdatedomains.md
@@ -5 +5 @@
-Creating OpenSearch Service domainsConfiguring access policiesAdvanced cluster settings
+Creating OpenSearch Service domainsConfiguring access policiesMigrating to OpenSearch Service with Migration AssistantAdvanced cluster settings
@@ -265,0 +266,103 @@ The console provides preconfigured access policies that you can customize for th
+## Migrating to OpenSearch Service with Migration Assistant
+
+Migration Assistant for Amazon OpenSearch Service is a comprehensive solution that simplifies the process of migrating from self-managed Elasticsearch or OpenSearch clusters to OpenSearch Service. This toolkit addresses the operational complexity of migrations while ensuring data integrity and validating performance post-migration.
+
+### Overview
+
+Whether you're setting up a proof-of-concept in AWS, transitioning production workloads, or upgrading to the latest OpenSearch versions, Migration Assistant provides step-by-step guidance, best practices, and tools to leverage the full potential of OpenSearch migrations.
+
+The Migration Assistant offers the following key benefits:
+
+  * **Metadata migration** \- Migrates cluster metadata, including index settings, type mappings, index templates, and aliases
+
+  * **Data migration** \- Migrates existing data from legacy clusters to OpenSearch Service domains
+
+  * **Live traffic handling** \- Intercepts and redirects live traffic from self-managed clusters to OpenSearch Service domains with minimal latency
+
+  * **Traffic replication** \- Replicates production traffic on target clusters to validate accuracy and performance
+
+  * **Performance testing** \- Simulates real-world traffic by capturing and replaying request patterns to fine-tune system performance
+
+  * **Global availability** \- Deploys across the most common AWS Regions for global reach and scalability
+
+
+
+
+Migration Assistant supports migrating from Elasticsearch versions 6.x and 7.x, and OpenSearch 1.x and 2.x. For more information, see [Supported migration paths](https://docs.opensearch.org/latest/migration-assistant/is-migration-assistant-right-for-you/#supported-migration-paths).
+
+###### Note
+
+Note the following additional information about Migration Assistant.
+
+  * The tool supports multi-hop migrations (for example, migration from Elasticsearch 5.x to OpenSearch Service 3.x in one hop).
+
+  * You can roll back a migration.
+
+  * For some use cases, the tool requires little or no downtime.
+
+  * The tool provides high-performance backfill without impacting a source cluster.
+
+
+
+
+### Migration scenarios
+
+The Migration Assistant is designed to handle the following migration scenarios:
+
+**Metadata migration**
+    
+
+Migrates cluster metadata such as index settings, aliases, and templates from your source cluster to the target OpenSearch Service domain.
+
+**Backfill migration**
+    
+
+Migrates existing or historical data from a source cluster to a target OpenSearch Service domain, ensuring that all your important data is preserved during the transition.
+
+**Live traffic migration**
+    
+
+Replicates ongoing live traffic from your source cluster to the target OpenSearch Service domain, allowing you to maintain service availability during migration.
+
+###### Important
+
+Migration strategies aren't universally applicable. The Migration Assistant provides guidance based on engineering best practices, but you should evaluate your specific requirements and test thoroughly before migrating production workloads.
+
+### Getting started with Migration Assistant
+
+Migration Assistant for Amazon OpenSearch Service is available as an AWS Solution with comprehensive documentation, deployment templates, and source code. To get started with Migration Assistant:
+
+###### To access Migration Assistant resources
+
+  1. Review the complete solution documentation at [Migration Assistant for Amazon OpenSearch Service solution overview](https://docs.aws.amazon.com/solutions/latest/migration-assistant-for-amazon-opensearch-service/solution-overview.html).
+
+  2. Understand the costs and requirements by reading the [deployment planning guide](https://docs.aws.amazon.com/solutions/latest/migration-assistant-for-amazon-opensearch-service/plan-your-deployment.html).
+
+  3. Deploy the solution using the [deployment instructions](https://docs.opensearch.org/latest/migration-assistant/migration-phases/) and follow the [usage guide](https://docs.aws.amazon.com/solutions/latest/migration-assistant-for-amazon-opensearch-service/use-the-solution.html) to perform your migration.
+
+
+
+
+For developers and advanced users, Migration Assistant source code and additional documentation are available in the [OpenSearch migrations GitHub repository](https://github.com/opensearch-project/opensearch-migrations).
+
+### Solution architecture
+
+When deployed in AWS, Migration Assistant uses several AWS services to provide a comprehensive migration solution:
+
+  * **AWS CloudFormation** \- Provides Infrastructure as Code (IaC) templates to deploy and configure Migration Assistant
+
+  * **OpenSearch Service** \- The target service for your migrated search and analytics workloads
+
+  * **Amazon Managed Streaming for Apache Kafka** \- Provides stream processing capabilities for durable storage and reuse of HTTP traffic
+
+  * **Amazon Elastic Container Service** \- Runs the Migration Management Console and Traffic Replayer in secure, scalable containers
+
+  * **Amazon Elastic File System** \- Provides scalable persistent storage for request and response data from both source and target clusters
+
+  * **Amazon Simple Storage Service** \- Stores snapshots for historical backfill tasks and Infrastructure as Code content
+
+
+
+
+For detailed architecture information, see [Migration Assistant architecture details](https://docs.opensearch.org/latest/migration-assistant/architecture/).
+