AWS opensearch-service documentation change
Summary
Updated release history with new features including MCP Apps, cross-region data access, unified observability, agentic AI capabilities, PPL/natural language queries, Cluster Insights, AI forecasting, and SAML fine-grained access control. Reordered existing entries with updated dates.
Security assessment
Added documentation for SAML fine-grained access control feature which enables granular data access policies. No evidence of addressing a specific security vulnerability.
Diff
diff --git a/opensearch-service/latest/developerguide/application-release-history.md b/opensearch-service/latest/developerguide/application-release-history.md index b0bbc4a8a..875247f78 100644 --- a//opensearch-service/latest/developerguide/application-release-history.md +++ b//opensearch-service/latest/developerguide/application-release-history.md @@ -13 +13,5 @@ Change | Release date | Description -New feature | 2025-03-10 | OpenSearch UI now supports cross-account data access to OpenSearch domains. You can configure applications in one account to access domains in different accounts using IAM or AWS IAM Identity Center authentication, for both public and VPC domains. For more information, see [Cross-account data access to OpenSearch domains](./application-cross-account-data-access-domains.html). +New feature | 2026-06-10 | Amazon OpenSearch Service now supports MCP Apps, which bring observability workflows into compatible agentic IDEs such as Claude Desktop and VS Code. Your AI agent can investigate incidents using logs, traces, metrics, and alerts stored in OpenSearch domains, collections, and Amazon Managed Service for Prometheus, and review results in interactive visualizations rendered in the same conversation. For more information, see [Agentic Observability with MCP Apps](./opensearch-observability-mcp-app.html). +New feature | 2026-05-01 | OpenSearch UI now supports cross-region data access to OpenSearch domains. You can query or build dashboards on domains hosted in different AWS Regions from a single OpenSearch UI application, for both public and VPC domains, without switching endpoints or replicating data. Cross-region data access can be combined with cross-account data access and supports IAM and AWS IAM Identity Center authentication. For more information, see [Cross-region data access to OpenSearch domains](./application-cross-region-data-access-domains.html). +New feature | 2026-04-09 | Amazon OpenSearch Service now provides a unified observability experience in OpenSearch UI that brings together metrics, logs, traces, and AI agent tracing. This release adds native integration with Amazon Managed Service for Prometheus so you can query Prometheus metrics with PromQL alongside logs and traces, plus application monitoring powered by RED metrics and AI agent tracing using OpenTelemetry GenAI semantic conventions. For more information, see [Metrics](./observability-metrics.html). +New feature | 2026-03-31 | Amazon OpenSearch Service now offers agentic AI capabilities for log analytics in the Observability workspace of OpenSearch UI. You can use agentic chat to analyze data with natural language, trigger an investigation agent to autonomously perform root cause analysis, and use agent memory to continue conversations across feature pages and sessions. For more information, see [Agentic Chat in Amazon OpenSearch Service](./application-agentic-chat.html). +New feature | 2026-03-12 | OpenSearch UI now supports cross-account data access to OpenSearch domains. You can configure applications in one account to access domains in different accounts using IAM or AWS IAM Identity Center authentication, for both public and VPC domains. For more information, see [Cross-account data access to OpenSearch domains](./application-cross-account-data-access-domains.html). @@ -14,0 +19,4 @@ New feature | 2025-12-29 | OpenSearch UI now supports customer managed keys (CM +New feature | 2025-11-24 | Amazon OpenSearch Service now makes Piped Processing Language (PPL) and natural language the default query experience in the Observability workspace of OpenSearch UI. The enhanced experience adds new commands for deep analysis, faceted exploration, and natural language querying so you can move from query to visualization within a single interface. For more information, see [Querying logs using PPL](./observability-analyze-logs.html#observability-logs-query-ppl). +New feature | 2025-11-19 | Amazon OpenSearch Service now provides Cluster Insights, a monitoring solution that gives comprehensive operational visibility of your clusters through a single dashboard in OpenSearch UI. It consolidates operational data across nodes, indexes, and shards and surfaces relevant metrics, affected resources, top-N query analysis, and remediation steps. Available at no additional cost for domains running OpenSearch 2.17 or later. For more information, see [Unified operational monitoring with Cluster Insights](./cluster-insights.html). +New feature | 2025-09-15 | Amazon OpenSearch Service now supports AI-powered forecasting on time-series data indexed in OpenSearch domains. You can generate forecasts and visualizations within OpenSearch UI to anticipate trends in metrics such as infrastructure utilization, application performance, and business metrics, without requiring data science or AI expertise. Available for domains running OpenSearch 3.1 or later. +New feature | 2025-08-08 | OpenSearch UI now supports fine-grained access control when accessed through SAML with IAM federation. You can map identity provider user attributes and roles to OpenSearch backend roles to enforce index-level permissions and document-level security for more granular data access control. For more information, see [Enabling SAML federation with AWS Identity and Access Management](./application-enable-SAML-identity-federation.html).