AWS Security ChangesHomeSearch

AWS opensearch-service: Replace placeholder account ID in SAML access policy example

Service: opensearch-service · 2026-10-08 · Documentation low

File: opensearch-service/latest/developerguide/application-enable-SAML-identity-federation.md

Summary

The example access policy ARN now uses a concrete account ID (111122223333) instead of the generic 12345678901 placeholder.

Security assessment

Only a placeholder account ID was swapped for a sample value; the policy semantics (including the pre-existing wildcard Principal) are unchanged, so this is a cosmetic documentation edit.

Evidence

    --access-policies '{"Version": "2012-10-17","Statement":[{"Effect":"Allow","Principal":{"AWS":"*"},"Action":"es:*","Resource":"arn:aws:es:us-east-1:111122223333:domain/neosaml10/*"}]}' \

Diff

diff --git a/opensearch-service/latest/developerguide/application-enable-SAML-identity-federation.md b/opensearch-service/latest/developerguide/application-enable-SAML-identity-federation.md
index bacbb8e..ccb6510 100644
--- a//opensearch-service/latest/developerguide/application-enable-SAML-identity-federation.md
+++ b//opensearch-service/latest/developerguide/application-enable-SAML-identity-federation.md
@@ -543 +543 @@ You can also configure fine-grained access control using the AWS CLI.
-    --access-policies '{"Version": "2012-10-17","Statement":[{"Effect":"Allow","Principal":{"AWS":"*"},"Action":"es:*","Resource":"arn:aws:es:us-east-1:12345678901:domain/neosaml10/*"}]}' \
+    --access-policies '{"Version": "2012-10-17","Statement":[{"Effect":"Allow","Principal":{"AWS":"*"},"Action":"es:*","Resource":"arn:aws:es:us-east-1:111122223333:domain/neosaml10/*"}]}' \