AWS Security ChangesHomeSearch

AWS opensearch-service documentation change

Service: opensearch-service · 2026-05-04 · Documentation low

File: opensearch-service/latest/developerguide/pipeline-security-overview.md

Summary

Updated image captions for cross-account pipeline security diagram and role selection interface.

Security assessment

Enhances documentation about IAM role security for pipelines without addressing vulnerabilities.

Diff

diff --git a/opensearch-service/latest/developerguide/pipeline-security-overview.md b/opensearch-service/latest/developerguide/pipeline-security-overview.md
index ece902f4d..34bdb5531 100644
--- a//opensearch-service/latest/developerguide/pipeline-security-overview.md
+++ b//opensearch-service/latest/developerguide/pipeline-security-overview.md
@@ -22 +22 @@ The following image demonstrates a typical pipeline setup, where a data source s
-![Cross-account data ingestion pipeline showing client application, roles, and OpenSearch sink.](/images/opensearch-service/latest/developerguide/images/pipeline-security.png)
+![Cross-account data flow from Fluent Bit through STS assume role, ingestion role, pipeline, to OpenSearch sink.](/images/opensearch-service/latest/developerguide/images/pipeline-security.png)
@@ -43 +43 @@ When you create a pipeline, you have the option of specifying an existing IAM ro
-![Pipeline role selection interface with options to create new or use existing IAM role.](/images/opensearch-service/latest/developerguide/images/pipeline-role.png)
+![Pipeline role section with Use an existing IAM role selected and Choose an existing role dropdown.](/images/opensearch-service/latest/developerguide/images/pipeline-role.png)