AWS Security ChangesHomeSearch

AWS opensearch-service documentation change

Service: opensearch-service · 2026-01-25 · Documentation low

File: opensearch-service/latest/ServerlessAPIReference/API_CreateCollection.md

Summary

Added 'collectionGroupName' and 'encryptionConfig' parameters to CreateCollection API, including KMS key specification.

Security assessment

EncryptionConfig parameter explicitly documents at-rest encryption (security feature), but lacks evidence of patching a vulnerability. Error message refinement doesn't indicate security fixes.

Diff

diff --git a/opensearch-service/latest/ServerlessAPIReference/API_CreateCollection.md b/opensearch-service/latest/ServerlessAPIReference/API_CreateCollection.md
index 7bee5757d..a5d4e3b33 100644
--- a//opensearch-service/latest/ServerlessAPIReference/API_CreateCollection.md
+++ b//opensearch-service/latest/ServerlessAPIReference/API_CreateCollection.md
@@ -15,0 +16 @@ Creates a new OpenSearch Serverless collection. For more information, see [Creat
+       "collectionGroupName": "string",
@@ -16,0 +18,4 @@ Creates a new OpenSearch Serverless collection. For more information, see [Creat
+       "encryptionConfig": { 
+          "[aWSOwnedKey](./API_EncryptionConfig.html#opensearchserverless-Type-EncryptionConfig-aWSOwnedKey)": boolean,
+          "[kmsKeyArn](./API_EncryptionConfig.html#opensearchserverless-Type-EncryptionConfig-kmsKeyArn)": "string"
+       },
@@ -47,0 +53,13 @@ Required: No
+**collectionGroupName **
+    
+
+The name of the collection group to associate with the collection.
+
+Type: String
+
+Length Constraints: Minimum length of 3. Maximum length of 32.
+
+Pattern: `[a-z][a-z0-9-]+`
+
+Required: No
+
@@ -58,0 +77,9 @@ Required: No
+**encryptionConfig **
+    
+
+Encryption settings for the collection.
+
+Type: [EncryptionConfig](./API_EncryptionConfig.html) object
+
+Required: No
+
@@ -119,0 +147 @@ Required: No
+          "[collectionGroupName](./API_CreateCollectionDetail.html#opensearchserverless-Type-CreateCollectionDetail-collectionGroupName)": "**_string_** ",
@@ -155 +183 @@ For information about the errors that are common to all actions, see [Common Err
-When creating a resource, thrown when a resource with the same name already exists or is being created. When deleting a resource, thrown when the resource is not in the ACTIVE or FAILED state.
+When creating a resource, thrown when a resource with the same name already exists or is being created.
@@ -270 +298 @@ CreateAccessPolicy
-CreateIndex
+CreateCollectionGroup