AWS opensearch-service documentation change
Summary
Added a note clarifying that IAM Identity Center access requires using the OpenSearch UI (Applications) feature and removed a section on deleting a security configuration via API. Also fixed typos ('permsions' to 'permissions', 'idenity-based' to 'identity-based').
Security assessment
The change adds a clarification about supported access methods (OpenSearch UI) for IAM Identity Center, which is a security feature for identity management. Removing the API deletion example may streamline documentation but does not indicate a security issue. The typo fixes improve clarity. This update enhances documentation around a security feature (IAM Identity Center integration) but does not address a specific vulnerability.
Diff
diff --git a/opensearch-service/latest/developerguide/serverless-iam-identity-center.md b/opensearch-service/latest/developerguide/serverless-iam-identity-center.md index 05bb5e3fe..e8cb899dd 100644 --- a//opensearch-service/latest/developerguide/serverless-iam-identity-center.md +++ b//opensearch-service/latest/developerguide/serverless-iam-identity-center.md @@ -12,0 +13,4 @@ You can use IAM Identity Center principals (users and groups) to access Amazon O +###### Note + +To access Amazon OpenSearch Serverless collections using IAM Identity Center users or groups, you must use the OpenSearch UI (Applications) feature. Direct access to OpenSearch Serverless Dashboards using IAM Identity Center credentials is not supported. For more information, see [Getting started with the OpenSearch user interface](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/application.html). + @@ -15 +19 @@ After the IAM Identity Center instance is created, the customer account administ -The IAM Identity Center integration for Amazon OpenSearch Serverless uses the following AWS IAM Identity Center (IAM) permsions: +The IAM Identity Center integration for Amazon OpenSearch Serverless uses the following AWS IAM Identity Center (IAM) permissions: @@ -30 +34 @@ The IAM Identity Center integration for Amazon OpenSearch Serverless uses the fo -The following idenity-based access policy can be used to manage all IAM Identity Center configurations: +The following identity-based access policy can be used to manage all IAM Identity Center configurations: @@ -149,7 +152,0 @@ You can grant access to collections, indexes, or both. If you want different use -IAM Identity Center offers two instances of providers, one for your organization account and one for your member accout. If you need to change your IAM Identity Center instance, you need to delete your security configuration through the `DeleteSecurityConfig` API and create a new security configuration using the new IAM Identity Center instance. The following command can be used to delete an IAM Identity Center provider: - - - aws opensearchserverless delete-security-config \ - --region us-east-1 \ - --id <id_from_list_security_configs> -