AWS opensearch-service high security documentation change
Summary
Added enforcement policy for mandatory service software updates with isolation and deletion consequences for non-compliance
Security assessment
Explicitly mandates security-critical updates within 30 days to maintain compliance. Failure to comply leads to domain isolation and eventual data deletion, directly addressing security posture enforcement.
Diff
diff --git a/opensearch-service/latest/developerguide/service-software.md b/opensearch-service/latest/developerguide/service-software.md index e9f4479d0..d8731f46c 100644 --- a//opensearch-service/latest/developerguide/service-software.md +++ b//opensearch-service/latest/developerguide/service-software.md @@ -15 +15,16 @@ Amazon OpenSearch Service regularly releases service software updates that add f -Service software updates differ from OpenSearch _version_ upgrades. For information about upgrading to a later version of OpenSearch, see [Upgrading Amazon OpenSearch Service domains](./version-migration.html). +Service software updates differ from OpenSearch Service _version_ upgrades. For information about upgrading to a later version of OpenSearch Service, see [Upgrading Amazon OpenSearch Service domains](./version-migration.html). + +OpenSearch Service requires you to apply required service software updates within 30 days of their availability. These updates are critical for maintaining security compliance. + +If you don't apply required updates within the 30-day period, you'll receive reminder notifications every 15 days for 30 days. After this period without compliance, your domain will be isolated with the following effects: + + * All network access to your domain is removed + + * Domain status changes to **isolated** + + * The domain remains unusable until you apply the required updates + + + + +During isolation, you'll continue receiving reminder notifications every 15 days for 60 days. If you don't apply the required updates within this period, your OpenSearch Service domain and all associated data will be permanently deleted. For more information, see [Troubleshooting validation errors](./managedomains-configuration-changes.html#validation).