AWS opensearch-service documentation change
Summary
Added prerequisite note about VPC connectivity and security group configuration for cross-cluster search when domains are in a VPC.
Security assessment
The change adds documentation about network security requirements (VPC Peering/Transit Gateway and security groups) for cross-cluster search, which is a security best practice for isolating and controlling traffic between domains. However, there is no indication of a specific security issue being fixed.
Diff
diff --git a/opensearch-service/latest/developerguide/cross-cluster-search.md b/opensearch-service/latest/developerguide/cross-cluster-search.md index 7756a643c..963367a9f 100644 --- a//opensearch-service/latest/developerguide/cross-cluster-search.md +++ b//opensearch-service/latest/developerguide/cross-cluster-search.md @@ -79,0 +80,2 @@ Before you set up cross-cluster search, make sure that your domains meet the fol + * If either domain is in a VPC, the domains must be connected via VPC Peering or Transit Gateway, and the security groups must allow traffic between them. +