AWS Security ChangesHomeSearch

AWS cli: OpenSearch describe-domains: new FIPS post-quantum TLS policy value

Service: cli · 2026-10-20 · Documentation medium

File: cli/latest/reference/opensearch/describe-domains.md · Type: encryption

Summary

Adds Policy-Min-TLS-1-2-FIPS-PQ-2026-10 (TLS 1.2–1.3, FIPS, post-quantum ciphers) to the documented TLSSecurityPolicy values in describe-domains output, plus CLI version bump.

Security assessment

Documents an additional TLS security policy option in the domain status list output; security-relevant encryption documentation, not a vulnerability fix.

Evidence

+>>>>   * **Policy-Min-TLS-1-2-FIPS-PQ-2026-10:** TLS security policy that supports TLS version 1.2 to TLS version 1.3 with FIPS and post-quantum cipher suites

Diff

diff --git a/cli/latest/reference/opensearch/describe-domains.md b/cli/latest/reference/opensearch/describe-domains.md
index f57cd7e..b6ed8e0 100644
--- a//cli/latest/reference/opensearch/describe-domains.md
+++ b//cli/latest/reference/opensearch/describe-domains.md
@@ -15 +15 @@
-  * [AWS CLI 2.38.1 Command Reference](../../index.html) »
+  * [AWS CLI 2.38.2 Command Reference](../../index.html) »
@@ -1046,0 +1047 @@ DomainStatusList -> (list)
+>>>>   * **Policy-Min-TLS-1-2-FIPS-PQ-2026-10:** TLS security policy that supports TLS version 1.2 to TLS version 1.3 with FIPS and post-quantum cipher suites
@@ -1055,0 +1057 @@ DomainStatusList -> (list)
+>>>>   * `Policy-Min-TLS-1-2-FIPS-PQ-2026-10`
@@ -1622 +1624 @@ DomainStatusList -> (list)
-  * [AWS CLI 2.38.1 Command Reference](../../index.html) »
+  * [AWS CLI 2.38.2 Command Reference](../../index.html) »