AWS opensearch-service documentation change
Summary
Updated service principal names from 'osis.amazon.com' to 'osis.amazonaws.com' and 'self-managed-vpce.osis.amazon.com' to 'self-managed-vpce.osis.amazonaws.com' in service-linked role trust policies.
Security assessment
This change corrects the domain names in service principal references for IAM roles. It ensures the trust policies use the correct AWS service domain, which is important for proper IAM role functioning but does not address a security vulnerability. The correction prevents potential misconfiguration that could affect service access.
Diff
diff --git a/opensearch-service/latest/developerguide/slr-osis.md b/opensearch-service/latest/developerguide/slr-osis.md index e18dba784..0d6b65547 100644 --- a//opensearch-service/latest/developerguide/slr-osis.md +++ b//opensearch-service/latest/developerguide/slr-osis.md @@ -17 +17 @@ The `AWSServiceRoleForAmazonOpenSearchIngestionService` service-linked role trus - * `osis.amazon.com` + * `osis.amazonaws.com` @@ -45 +45 @@ The `AWSServiceRoleForOpensearchIngestionSelfManagedVpce` service-linked role tr - * `self-managed-vpce.osis.amazon.com` + * `self-managed-vpce.osis.amazonaws.com`