AWS opensearch-service documentation change
Summary
Reordered steps in the domain creation guide, swapping positions of 'Use cases', 'templates', 'deployment option', and other configuration sections without altering security-related content.
Security assessment
Changes involve non-security procedural adjustments (step renumbering/label updates) with identical security configurations (fine-grained access control, public access settings) preserved in equivalent steps. No vulnerability fixes or security enhancements introduced.
Diff
diff --git a/opensearch-service/latest/developerguide/gsgcreate-domain.md b/opensearch-service/latest/developerguide/gsgcreate-domain.md index 32551cb7b..0b3a9ba59 100644 --- a//opensearch-service/latest/developerguide/gsgcreate-domain.md +++ b//opensearch-service/latest/developerguide/gsgcreate-domain.md @@ -31 +31 @@ To quickly configure a production domain with best practices, you can choose **E - 6. For templates, choose **Dev/test**. + 6. For **Use cases** , choose **Observability**. @@ -33 +33 @@ To quickly configure a production domain with best practices, you can choose **E - 7. For the deployment option, choose **Domain with standby**. + 7. For templates, choose **Dev/test**. @@ -35 +35 @@ To quickly configure a production domain with best practices, you can choose **E - 8. For **Version** , choose the latest version. + 8. For the deployment option, choose **Domain with standby**. @@ -37 +37 @@ To quickly configure a production domain with best practices, you can choose **E - 9. For now, ignore the **Data nodes** , **Warm and cold data storage** , **Dedicated master nodes** , **Snapshot configuration** , and **Custom endpoint** sections. Note that the default data node instance type (`r7g.large.search`) incurs charges. If you want to minimize costs for this tutorial, consider selecting a smaller instance type such as `t3.small.search` under **Data nodes**. + 9. For **Version** , choose the latest version. @@ -39 +39 @@ To quickly configure a production domain with best practices, you can choose **E - 10. For simplicity in this tutorial, use a public access domain. Under **Network** , choose **Public access**. + 10. For now, ignore the **Data nodes** , **Warm and cold data storage** , **Dedicated master nodes** , **Snapshot configuration** , and **Custom endpoint** sections. Note that the default data node instance type (`r7g.large.search`) incurs charges. If you want to minimize costs for this tutorial, consider selecting a smaller instance type such as `t3.small.search` under **Data nodes**. @@ -41 +41 @@ To quickly configure a production domain with best practices, you can choose **E - 11. In the fine-grained access control settings, keep the **Enable fine-grained access control** check box selected. Select **Create master user** and provide a username and password. + 11. For simplicity in this tutorial, use a public access domain. Under **Network** , choose **Public access**. @@ -43 +43 @@ To quickly configure a production domain with best practices, you can choose **E - 12. For now, ignore the **SAML authentication** and **Amazon Cognito authentication** sections. + 12. In the fine-grained access control settings, keep the **Enable fine-grained access control** check box selected. Select **Create master user** and provide a username and password. @@ -45 +45 @@ To quickly configure a production domain with best practices, you can choose **E - 13. For **Access policy** , choose **Only use fine-grained access control**. In this tutorial, fine-grained access control handles authentication, not the domain access policy. + 13. For now, ignore the **SAML authentication** and **Amazon Cognito authentication** sections. @@ -47 +47,3 @@ To quickly configure a production domain with best practices, you can choose **E - 14. Ignore the rest of the settings and choose **Create**. New domains typically take 15–30 minutes to initialize, but can take longer depending on the configuration. After your domain initializes, select it to open its configuration pane. Note the domain endpoint under **General information** (for example, `https://search-`my-domain`.us-east-1.es.amazonaws.com`), which you'll use in the next step. + 14. For **Access policy** , choose **Only use fine-grained access control**. In this tutorial, fine-grained access control handles authentication, not the domain access policy. + + 15. Ignore the rest of the settings and choose **Create**. New domains typically take 15–30 minutes to initialize, but can take longer depending on the configuration. After your domain initializes, select it to open its configuration pane. Note the domain endpoint under **General information** (for example, `https://search-`my-domain`.us-east-1.es.amazonaws.com`), which you'll use in the next step.