AWS Security ChangesHomeSearch

AWS opensearch-service medium security documentation change

Service: opensearch-service · 2026-07-04 · Security-related medium

File: opensearch-service/latest/developerguide/serverless-clients.md

Summary

Added credentials provider to Java client configuration and fixed syntax in signing service name.

Security assessment

Explicitly sets credentials in transport options, preventing potential unauthorized access. Fixes missing comma in security-sensitive signing service configuration.

Diff

diff --git a/opensearch-service/latest/developerguide/serverless-clients.md b/opensearch-service/latest/developerguide/serverless-clients.md
index e7d7f6563..a8d6006a6 100644
--- a//opensearch-service/latest/developerguide/serverless-clients.md
+++ b//opensearch-service/latest/developerguide/serverless-clients.md
@@ -230 +230 @@ The important difference compared to OpenSearch Service _domains_ is the service
-            "aoss" // signing service name
+            "aoss", // signing service name
@@ -232 +232 @@ The important difference compared to OpenSearch Service _domains_ is the service
-            AwsSdk2TransportOptions.builder().build()
+            AwsSdk2TransportOptions.builder().setCredentials(credentialsProvider).build()