AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2026-04-04 · Documentation medium

File: cli/latest/reference/opensearch/create-domain.md

Summary

Added new TLS security policy 'Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08' that supports TLS version 1.3 with FIPS, and updated AWS CLI version reference

Security assessment

This change adds documentation for a new TLS security policy option that enhances security by supporting TLS 1.3 with FIPS compliance. This is a security feature addition, not a fix for a specific security issue. The change improves encryption standards and compliance capabilities for OpenSearch domains.

Diff

diff --git a/cli/latest/reference/opensearch/create-domain.md b/cli/latest/reference/opensearch/create-domain.md
index aafe974ea..8529fd918 100644
--- a//cli/latest/reference/opensearch/create-domain.md
+++ b//cli/latest/reference/opensearch/create-domain.md
@@ -15 +15 @@
-  * [AWS CLI 2.34.21 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.23 Command Reference](../../index.html) »
@@ -957,0 +958 @@ JSON Syntax:
+>>   * **Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08:** TLS security policy that supports TLS version 1.3 with FIPS
@@ -965,0 +967 @@ JSON Syntax:
+>>   * `Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08`
@@ -1008 +1010 @@ JSON Syntax:
-      "TLSSecurityPolicy": "Policy-Min-TLS-1-0-2019-07"|"Policy-Min-TLS-1-2-2019-07"|"Policy-Min-TLS-1-2-PFS-2023-10",
+      "TLSSecurityPolicy": "Policy-Min-TLS-1-0-2019-07"|"Policy-Min-TLS-1-2-2019-07"|"Policy-Min-TLS-1-2-PFS-2023-10"|"Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08",
@@ -2529,0 +2532 @@ DomainStatus -> (structure)
+>>>   * **Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08:** TLS security policy that supports TLS version 1.3 with FIPS
@@ -2537,0 +2541 @@ DomainStatus -> (structure)
+>>>   * `Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08`
@@ -3023 +3027 @@ DomainStatus -> (structure)
-  * [AWS CLI 2.34.21 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.23 Command Reference](../../index.html) »