AWS opensearch-service high security documentation change
Summary
Added TLSNegotiationError metric documentation for monitoring failed TLS handshakes
Security assessment
Documents new security monitoring capability for detecting TLS misconfigurations/attacks. Directly addresses potential security weaknesses by enabling detection of insecure connection attempts.
Diff
diff --git a/opensearch-service/latest/developerguide/managedomains-cloudwatchmetrics.md b/opensearch-service/latest/developerguide/managedomains-cloudwatchmetrics.md index a3061a5f3..a9fa185a5 100644 --- a//opensearch-service/latest/developerguide/managedomains-cloudwatchmetrics.md +++ b//opensearch-service/latest/developerguide/managedomains-cloudwatchmetrics.md @@ -135,0 +136 @@ The logic for this metric changed in service software R20220323. For more inform +`TLSNegotiationError` | The number of failed TLS handshake attempts between clients and the domain endpoint. This metric increments when a client attempts to connect using an unsupported TLS version or cipher suite. Relevant statistics: Sum