AWS opensearch-service medium security documentation change
Summary
Added domain isolation and deletion policy for domains in unusable states
Security assessment
The added text documents a security control to automatically isolate and delete domains after 60 days of unresolved issues, mitigating risks from abandoned or misconfigured resources. This addresses potential security exposure from unattended domains.
Diff
diff --git a/opensearch-service/latest/developerguide/managedomains-configuration-changes.md b/opensearch-service/latest/developerguide/managedomains-configuration-changes.md index ec68129c2..c3f868e40 100644 --- a//opensearch-service/latest/developerguide/managedomains-configuration-changes.md +++ b//opensearch-service/latest/developerguide/managedomains-configuration-changes.md @@ -401 +401,5 @@ If you change the configuration for a domain, OpenSearch Service creates a new c -When you initiate a configuration change or perform an OpenSearch or Elasticsearch version upgrade, OpenSearch Service first performs a series of validation checks to ensure that your domain is eligible for an update. If any of these checks fail, you receive a notification in the console containing the specific issues that you must fix before updating your domain. The following table lists the possible domain issues that OpenSearch Service might surface, and steps to resolve them. +When you initiate a configuration change or perform an OpenSearch or Elasticsearch version upgrade, OpenSearch Service first performs a series of validation checks to ensure that your domain is eligible for an update. If any of these checks fail, you receive a notification in the console containing the specific issues that you must fix before updating your domain. + +OpenSearch Service isolates your domain if it remains in an unusable state for more than 60 days. We'll send you notification reminders to resolve these issues. If you don't fix the issues within this time frame, OpenSearch Service deletes your domain and its data. + +The following table lists the possible domain issues that OpenSearch Service might surface, and steps to resolve them. @@ -454 +458 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -Creating and managing domains +Automatic semantic enrichment