AWS solutions documentation change
Summary
Updated all references from 'Amazon OpenSearch Serverless' to 'Amazon OpenSearch Serverless NextGen'. Maintained same authentication (SigV4) and access control procedures.
Security assessment
Changes are purely branding/nomenclature updates ('NextGen' addition). No modifications to security-related content about IAM roles, data access policies, or authentication mechanisms.
Diff
diff --git a/solutions/latest/migration-assistant-for-amazon-opensearch-service/mts-connect.md b/solutions/latest/migration-assistant-for-amazon-opensearch-service/mts-connect.md index 9f439c313..4717166a7 100644 --- a//solutions/latest/migration-assistant-for-amazon-opensearch-service/mts-connect.md +++ b//solutions/latest/migration-assistant-for-amazon-opensearch-service/mts-connect.md @@ -11 +11 @@ Step 1: Find the migration IAM roleStep 2: Update the collection data access pol -Migration Assistant authenticates to an Amazon OpenSearch Serverless collection with [AWS Signature Version 4](https://docs.aws.amazon.com/general/latest/gr/signature-version-4.html) (SigV4) using the credentials of the migration IAM role created during deployment. Before the workflow can write to your collection, you grant that role access through the collection’s data access policy and point the target configuration at the collection endpoint. +Migration Assistant authenticates to an Amazon OpenSearch Serverless NextGen collection with [AWS Signature Version 4](https://docs.aws.amazon.com/general/latest/gr/signature-version-4.html) (SigV4) using the credentials of the migration IAM role created during deployment. Before the workflow can write to your collection, you grant that role access through the collection’s data access policy and point the target configuration at the collection endpoint. @@ -26 +26 @@ Record the ARN of the role that matches your Amazon EKS cluster name. -Grant the migration IAM role access to the collection and its indexes with an [Amazon OpenSearch Serverless data access policy](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/serverless-data-access.html). Create a JSON policy document that grants collection-level and index-level permissions to the role ARN from Step 1, then create the policy: +Grant the migration IAM role access to the collection and its indexes with an [Amazon OpenSearch Serverless NextGen data access policy](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/serverless-data-access.html). Create a JSON policy document that grants collection-level and index-level permissions to the role ARN from Step 1, then create the policy: @@ -69 +69 @@ In addition to the data access policy, the migration IAM role’s IAM permission -Edit the workflow configuration with `workflow configure edit` and set the target cluster to your collection endpoint. For an Amazon OpenSearch Serverless collection, set the SigV4 `service` to `aoss` (for an Amazon OpenSearch Service domain it is `es`), and use the collection endpoint in the form `https://<collection-id>.<region>.aoss.amazonaws.com`: +Edit the workflow configuration with `workflow configure edit` and set the target cluster to your collection endpoint. For an Amazon OpenSearch Serverless NextGen collection, set the SigV4 `service` to `aoss` (for an Amazon OpenSearch Service domain it is `es`), and use the collection endpoint in the form `https://<collection-id>.<region>.aoss.amazonaws.com`: