AWS cli high security documentation change

Service: cli · 2026-01-16 · Security-related high

File: cli/latest/reference/opensearchserverless/create-collection.md

Summary

Added encryption configuration options and collection group association

Security assessment

Added --encryption-config parameter with KMS key configuration for data encryption at rest. This directly addresses data protection security by documenting encryption controls. Specific evidence: kmsKeyArn parameter with encryption pattern validation.

Diff

diff --git a/cli/latest/reference/opensearchserverless/create-collection.md b/cli/latest/reference/opensearchserverless/create-collection.md
index 3b5110247..bc9e2f995 100644
--- a//cli/latest/reference/opensearchserverless/create-collection.md
+++ b//cli/latest/reference/opensearchserverless/create-collection.md
@@ -13 +13 @@
-  * [next](create-index.html "create-index") |
+  * [next](create-collection-group.html "create-collection-group") |
@@ -15 +15 @@
-  * [AWS CLI 2.32.33 Command Reference](../../index.html) »
+  * [AWS CLI 2.33.1 Command Reference](../../index.html) »
@@ -23 +23 @@
-  * [create-index →](create-index.html "next chapter \(use the right arrow\)")
+  * [create-collection-group →](create-collection-group.html "next chapter \(use the right arrow\)")
@@ -72,0 +73,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/opense
+    [--collection-group-name <value>]
+    [--encryption-config <value>]
@@ -228,0 +231,47 @@ JSON Syntax:
+`--collection-group-name` (string)
+
+> The name of the collection group to associate with the collection.
+> 
+> Constraints:
+> 
+>   * min: `3`
+>   * max: `32`
+>   * pattern: `[a-z][a-z0-9-]+`
+> 
+
+
+`--encryption-config` (structure)
+
+> Encryption settings for the collection.
+> 
+> aWSOwnedKey -> (boolean)
+>
+>> Indicates whether to use an Amazon Web Services-owned key for encryption.
+> 
+> kmsKeyArn -> (string)
+>
+>> The ARN of the Amazon Web Services Key Management Service key used to encrypt the collection.
+>> 
+>> Constraints:
+>> 
+>>   * min: `10`
+>>   * max: `100`
+>>   * pattern: `arn:(aws|aws-us-gov|aws-cn|aws-iso|aws-iso-b):kms:[a-z0-9-]+:[0-9]{12}:key/[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}`
+>> 
+
+
+Shorthand Syntax:
+    
+    
+    aWSOwnedKey=boolean,kmsKeyArn=string
+    
+
+JSON Syntax:
+    
+    
+    {
+      "aWSOwnedKey": true|false,
+      "kmsKeyArn": "string"
+    }
+    
+
@@ -437,0 +487,12 @@ createCollectionDetail -> (structure)
+> 
+> collectionGroupName -> (string)
+>
+>> The name of the collection group that contains this collection.
+>> 
+>> Constraints:
+>> 
+>>   * min: `3`
+>>   * max: `32`
+>>   * pattern: `[a-z][a-z0-9-]+`
+>> 
+
@@ -440 +501 @@ createCollectionDetail -> (structure)
-  * [create-index →](create-index.html "next chapter \(use the right arrow\)")
+  * [create-collection-group →](create-collection-group.html "next chapter \(use the right arrow\)")
@@ -447 +508 @@ createCollectionDetail -> (structure)
-  * [next](create-index.html "create-index") |
+  * [next](create-collection-group.html "create-collection-group") |
@@ -449 +510 @@ createCollectionDetail -> (structure)
-  * [AWS CLI 2.32.33 Command Reference](../../index.html) »
+  * [AWS CLI 2.33.1 Command Reference](../../index.html) »