AWS prescriptive-guidance documentation change
Summary
Replaced 'through VPC' with 'via VPC' and updated OpenSearch Dashboards documentation link.
Security assessment
Wording change maintains existing security descriptions. Link update points to current documentation but doesn't introduce new security content or address vulnerabilities.
Diff
diff --git a/prescriptive-guidance/latest/opensearch-service-migration/operations-security.md b/prescriptive-guidance/latest/opensearch-service-migration/operations-security.md index 47339b2c6..f070e1d09 100644 --- a//prescriptive-guidance/latest/opensearch-service-migration/operations-security.md +++ b//prescriptive-guidance/latest/opensearch-service-migration/operations-security.md @@ -31 +31 @@ The [Operational excellence](./stage-6-operational-excellence.html) section late -At AWS, security is the top priority. Amazon OpenSearch Service provides multi-layer security. The service takes care of all security patches and offers network isolation through VPC, fine-grained access control, and multi-tenant support. Your data is encrypted at rest using keys that you create and control through AWS Key Management Service (AWS KMS). The node-to-node encryption capability provides Transport Layer Security (TLS) for all communications between instances in a domain. Amazon OpenSearch Service is also HIPAA eligible, and compliant with PCI DSS, SOC, ISO, and FedRAMP standards to help you meet industry-specific or regulatory requirements. +At AWS, security is the top priority. Amazon OpenSearch Service provides multi-layer security. The service takes care of all security patches and offers network isolation via VPC, fine-grained access control, and multi-tenant support. Your data is encrypted at rest using keys that you create and control through AWS Key Management Service (AWS KMS). The node-to-node encryption capability provides Transport Layer Security (TLS) for all communications between instances in a domain. Amazon OpenSearch Service is also HIPAA eligible, and compliant with PCI DSS, SOC, ISO, and FedRAMP standards to help you meet industry-specific or regulatory requirements. @@ -37 +37 @@ During the planning stage, identify the people and processes that interact with - * **Authentication** – Amazon OpenSearch Service supports multiple ways to authenticate a user or software client. It supports [Amazon Cognito](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/cognito-auth.html) or [SAML authentication](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/saml.html) with your existing identity provider to access [OpenSearch Dashboards](https://docs.opensearch.org/latest/dashboards/). It also offers integration with IAM identities, and [basic HTTP authentication using an internal user database](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/fgac-walkthrough-basic.html). You should plan to configure and test an appropriate option for authentication. For more information, see the [OpenSearch Service security documentation](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/security.html). + * **Authentication** – Amazon OpenSearch Service supports multiple ways to authenticate a user or software client. It supports [Amazon Cognito](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/cognito-auth.html) or [SAML authentication](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/saml.html) with your existing identity provider to access [OpenSearch Dashboards](https://opensearch.org/docs/latest/dashboards/index/). It also offers integration with IAM identities, and [basic HTTP authentication using an internal user database](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/fgac-walkthrough-basic.html). You should plan to configure and test an appropriate option for authentication. For more information, see the [OpenSearch Service security documentation](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/security.html).