AWS solutions documentation change
Summary
Updated revision history to reflect changes including: support for OpenSearch Serverless NextGen, enhanced Solr migration capabilities, secure-by-default networking (TLS now default, plaintext requires explicit opt-out), updated documentation references, and ECS deployment end of support.
Security assessment
The change documents a security enhancement where TLS encryption is now the default for proxy traffic, and plaintext requires explicit opt-out. This reduces the risk of accidental exposure of unencrypted data but does not reference a specific security vulnerability or incident. No evidence of addressing a concrete security issue is present.
Diff
diff --git a/solutions/latest/migration-assistant-for-amazon-opensearch-service/revisions.md b/solutions/latest/migration-assistant-for-amazon-opensearch-service/revisions.md index ce86eabe0..5033a9cce 100644 --- a//solutions/latest/migration-assistant-for-amazon-opensearch-service/revisions.md +++ b//solutions/latest/migration-assistant-for-amazon-opensearch-service/revisions.md @@ -13 +13 @@ Change | Description | Date -Apache Solr migration support | You can now migrate from Apache Solr 6, 7, 8, and 9 to Amazon OpenSearch Service or Amazon OpenSearch Serverless. This expands beyond Elasticsearch migration support. Coverage includes bulk data backfill from Solr snapshots (including multi-shard collections), a live query translation proxy, and full Solr query syntax support. | May 15, 2026 +Apache Solr migration support | You can now migrate from Apache Solr 6, 7, 8, and 9 to Amazon OpenSearch Service or Amazon OpenSearch Serverless NextGen. This expands beyond Elasticsearch migration support. Coverage includes bulk data backfill from Solr snapshots, including multi-shard collections, and SolrCloud capture and replay for supported JSON-format traffic through the Solr transform providers. | May 15, 2026 @@ -15 +15 @@ Apache Solr migration support | You can now migrate from Apache Solr 6, 7, 8, a -Zero-downtime change data capture (CDC) pipelines on Amazon EKS | Continuous data sync from source to target runs on a configurable schedule (down to 6-hour cycles). This feature supports Elasticsearch 5.x through 8.x with TLS, and Amazon OpenSearch Serverless. You can keep source and target in sync during the migration window. You can validate the target on production traffic and cut over with confidence. | May 15, 2026 +Zero-downtime change data capture (CDC) pipelines on Amazon EKS | Continuous data sync from source to target runs on a configurable schedule (down to 6-hour cycles). This feature supports Elasticsearch 5.x through 8.x with TLS, and Amazon OpenSearch Serverless NextGen. You can keep source and target in sync during the migration window. You can validate the target on production traffic and cut over with confidence. | May 15, 2026 @@ -17 +17 @@ Kubernetes-native workflow orchestration | Migrations run as managed Argo Workf -Secure-by-default networking | The capture proxy defaults to TLS using cert-manager-issued self-signed certificates. Frontend mTLS (client-certificate) authentication is supported. The insecure plaintext authentication option has been removed. TLS no longer requires opt-in configuration. | May 15, 2026 +Secure-by-default networking | The capture proxy defaults to TLS using cert-manager-issued self-signed certificates. Frontend mTLS (client-certificate) authentication is supported. Plaintext proxy traffic is no longer the default; opt out per proxy with `tls.mode: plaintext` only when you intentionally want HTTP. TLS no longer requires opt-in configuration. | May 15, 2026 @@ -19,2 +19,2 @@ Source reconstruction for indexes with `_source` disabled | If your source clus -Migration Assistant 3.0 documentation refresh | Aligned implementation guide with the latest Migration Assistant 3.0 documentation. Source matrix updated to include Elasticsearch 1.x–2.x (backfill-only), Apache Solr 6.x–9.x, and Amazon OpenSearch Serverless targets. Added self-contained Amazon EKS deployment instructions, Workflow CLI guide, and expanded troubleshooting coverage. Removed references to the GitHub wiki. Architecture refreshed with control-plane and data-plane framing. | May 15, 2026 -Migration Assistant 3.0 | Amazon EKS deployment is now the recommended deployment option. ECS deployment enters support-only mode (end of support: July 15, 2026). Added Apache Solr 8.x as a supported source. Added Workflow CLI for declarative migration configuration, built-in approval gates, and interactive monitoring TUI. | April 2026 +Migration Assistant 3.0 documentation refresh | Aligned implementation guide with the latest Migration Assistant 3.0 documentation. Source matrix updated to include Elasticsearch 1.x–2.x (backfill-only), Apache Solr 6.x–9.x, and Amazon OpenSearch Serverless NextGen targets. Added self-contained Amazon EKS deployment instructions, Workflow CLI guide, and expanded troubleshooting coverage. Consolidated external references into implementation guide.Architecture refreshed with control-plane and data-plane framing. | May 15, 2026 +Migration Assistant 3.0 | Amazon EKS deployment is now the recommended deployment option. ECS deployment reached end of support July 15, 2026. Added Apache Solr 8.x as a supported source. Added Workflow CLI for declarative migration configuration, built-in approval gates, and interactive monitoring TUI. | April 2026 @@ -22 +22 @@ Migration Assistant 3.0 | Amazon EKS deployment is now the recommended deployme -Visit [Releases](https://github.com/opensearch-project/opensearch-migrations/releases) in our GitHub repository to track version-specific improvements and fixes. +Visit the [Migration Assistant documentation](https://docs.aws.amazon.com/solutions/migration-assistant-for-amazon-opensearch-service/) to track version-specific improvements and fixes. @@ -32 +32 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -Reference +Developer guide