AWS cli: OpenSearch describe-domain-config: new FIPS post-quantum TLS policy

Service: cli · 2026-10-20 · Documentation medium

File: cli/latest/reference/opensearch/describe-domain-config.md · Type: encryption

Summary

Adds the new Policy-Min-TLS-1-2-FIPS-PQ-2026-10 TLS security policy (TLS 1.2–1.3, FIPS, post-quantum cipher suites) to the documented TLSSecurityPolicy values returned by describe-domain-config, plus a CLI version bump to 2.38.2.

Security assessment

The change documents an additional in-transit encryption policy option (FIPS + post-quantum cipher suites) exposed in the domain config output; it is security-relevant documentation of a TLS hardening option, not a fix for a specific vulnerability.

Evidence

+>>>>   * **Policy-Min-TLS-1-2-FIPS-PQ-2026-10:** TLS security policy that supports TLS version 1.2 to TLS version 1.3 with FIPS and post-quantum cipher suites

Diff

diff --git a/cli/latest/reference/opensearch/describe-domain-config.md b/cli/latest/reference/opensearch/describe-domain-config.md
index 8e15e54..218f1d8 100644
--- a//cli/latest/reference/opensearch/describe-domain-config.md
+++ b//cli/latest/reference/opensearch/describe-domain-config.md
@@ -15 +15 @@
-  * [AWS CLI 2.38.1 Command Reference](../../index.html) »
+  * [AWS CLI 2.38.2 Command Reference](../../index.html) »
@@ -1416,0 +1417 @@ DomainConfig -> (structure)
+>>>>   * **Policy-Min-TLS-1-2-FIPS-PQ-2026-10:** TLS security policy that supports TLS version 1.2 to TLS version 1.3 with FIPS and post-quantum cipher suites
@@ -1425,0 +1427 @@ DomainConfig -> (structure)
+>>>>   * `Policy-Min-TLS-1-2-FIPS-PQ-2026-10`
@@ -2497 +2499 @@ DomainConfig -> (structure)
-  * [AWS CLI 2.38.1 Command Reference](../../index.html) »
+  * [AWS CLI 2.38.2 Command Reference](../../index.html) »