AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2026-04-04 · Documentation low

File: cli/latest/reference/opensearch/update-domain-config.md

Summary

Updated AWS CLI version reference from 2.34.21 to 2.34.23, added documentation for new TLS security policy 'Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08', and updated the TLSSecurityPolicy parameter to include the new option

Security assessment

This change adds a new TLS security policy option to the update-domain-config command, which is a security feature enhancement. The policy supports TLS 1.3 with FIPS compliance. No evidence of addressing a specific security vulnerability - it's expanding security policy options.

Diff

diff --git a/cli/latest/reference/opensearch/update-domain-config.md b/cli/latest/reference/opensearch/update-domain-config.md
index a38e3271e..247625157 100644
--- a//cli/latest/reference/opensearch/update-domain-config.md
+++ b//cli/latest/reference/opensearch/update-domain-config.md
@@ -15 +15 @@
-  * [AWS CLI 2.34.21 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.23 Command Reference](../../index.html) »
@@ -922,0 +923 @@ JSON Syntax:
+>>   * **Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08:** TLS security policy that supports TLS version 1.3 with FIPS
@@ -930,0 +932 @@ JSON Syntax:
+>>   * `Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08`
@@ -973 +975 @@ JSON Syntax:
-      "TLSSecurityPolicy": "Policy-Min-TLS-1-0-2019-07"|"Policy-Min-TLS-1-2-2019-07"|"Policy-Min-TLS-1-2-PFS-2023-10",
+      "TLSSecurityPolicy": "Policy-Min-TLS-1-0-2019-07"|"Policy-Min-TLS-1-2-2019-07"|"Policy-Min-TLS-1-2-PFS-2023-10"|"Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08",
@@ -2884,0 +2887 @@ DomainConfig -> (structure)
+>>>>   * **Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08:** TLS security policy that supports TLS version 1.3 with FIPS
@@ -2892,0 +2896 @@ DomainConfig -> (structure)
+>>>>   * `Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08`
@@ -3834 +3838 @@ DryRunProgressStatus -> (structure)
-  * [AWS CLI 2.34.21 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.23 Command Reference](../../index.html) »