AWS Security ChangesHomeSearch

AWS opensearch-service documentation change

Service: opensearch-service · 2026-01-19 · Documentation low

File: opensearch-service/latest/developerguide/application-enable-SAML-identity-federation.md

Summary

Updated IAM role policy selection instructions from 'OpenSearchFullAccess' to 'AmazonOpenSearchServiceFullAccess'

Security assessment

Corrects security documentation for SAML setup. Fixes potentially misleading policy reference (old policy name might be incorrect/deprecated) but shows no evidence of patching a vulnerability. Impacts security by ensuring proper permissions for identity federation.

Diff

diff --git a/opensearch-service/latest/developerguide/application-enable-SAML-identity-federation.md b/opensearch-service/latest/developerguide/application-enable-SAML-identity-federation.md
index ddbe58817..251e80fd3 100644
--- a//opensearch-service/latest/developerguide/application-enable-SAML-identity-federation.md
+++ b//opensearch-service/latest/developerguide/application-enable-SAML-identity-federation.md
@@ -207 +207 @@ To create your AWS Identity and Access Management role, complete the following s
-  8. In the **Permissions policies** list, select the check boxes for the policy you created earlier and for **OpenSearchFullAccess**.
+  8. In the **Permissions policies** list, select the check boxes for policies that grant OpenSearch Service permissions, for example, AWS managed policy **AmazonOpenSearchServiceFullAccess**.