AWS Security ChangesHomeSearch

AWS cli: OpenSearch describe-domain: new FIPS post-quantum TLS policy value

Service: cli · 2026-10-20 · Documentation medium

File: cli/latest/reference/opensearch/describe-domain.md · Type: encryption

Summary

Adds Policy-Min-TLS-1-2-FIPS-PQ-2026-10 (TLS 1.2–1.3, FIPS, post-quantum ciphers) to the documented TLSSecurityPolicy values in describe-domain output, plus CLI version bump.

Security assessment

Documents a new TLS security policy enum returned by describe-domain, informing users of a stronger FIPS/post-quantum encryption option; no vulnerability is referenced.

Evidence

+>>>   * **Policy-Min-TLS-1-2-FIPS-PQ-2026-10:** TLS security policy that supports TLS version 1.2 to TLS version 1.3 with FIPS and post-quantum cipher suites

Diff

diff --git a/cli/latest/reference/opensearch/describe-domain.md b/cli/latest/reference/opensearch/describe-domain.md
index 339ae38..7dac236 100644
--- a//cli/latest/reference/opensearch/describe-domain.md
+++ b//cli/latest/reference/opensearch/describe-domain.md
@@ -15 +15 @@
-  * [AWS CLI 2.38.1 Command Reference](../../index.html) »
+  * [AWS CLI 2.38.2 Command Reference](../../index.html) »
@@ -1032,0 +1033 @@ DomainStatus -> (structure)
+>>>   * **Policy-Min-TLS-1-2-FIPS-PQ-2026-10:** TLS security policy that supports TLS version 1.2 to TLS version 1.3 with FIPS and post-quantum cipher suites
@@ -1041,0 +1043 @@ DomainStatus -> (structure)
+>>>   * `Policy-Min-TLS-1-2-FIPS-PQ-2026-10`
@@ -1608 +1610 @@ DomainStatus -> (structure)
-  * [AWS CLI 2.38.1 Command Reference](../../index.html) »
+  * [AWS CLI 2.38.2 Command Reference](../../index.html) »