AWS opensearch-service: Use concrete account ID in KMS key policy example

Service: opensearch-service · 2026-10-08 · Documentation low

File: opensearch-service/latest/developerguide/application-encryption-cmk.md

Summary

The KMS key policy example principal ARN now uses 111122223333 instead of the account-id placeholder.

Security assessment

Placeholder substitution in a key policy snippet; no change to the documented permission model or encryption guidance.

Evidence

                    "AWS": "arn:aws:iam::111122223333:root"

Diff

diff --git a/opensearch-service/latest/developerguide/application-encryption-cmk.md b/opensearch-service/latest/developerguide/application-encryption-cmk.md
index 7bdc1dc..d8ee343 100644
--- a//opensearch-service/latest/developerguide/application-encryption-cmk.md
+++ b//opensearch-service/latest/developerguide/application-encryption-cmk.md
@@ -98 +98 @@ The key policy for your customer managed key must grant OpenSearch UI permission
-                    "AWS": "arn:aws:iam::account-id:root"
+                    "AWS": "arn:aws:iam::111122223333:root"