Security for Amazon OpenSearch Service

Securing Amazon OpenSearch Service at a high level could be classified into the following types:

• Encryption: Keeping your data secure at rest and in transit
• Authentication: Leveraging authentication infrastructure to authenticate to the OpenSearch domain
• Authorization: Granular authorization can be used to control user actions in your cluster
• Auditing: Auditing functionality allows you to track and record all user actions, helping you to meet compliance requirements such as the HIPAA and PCI

AWS offers various services to meet the objectives of security in Amazon OpenSearch Service:

• Encryption: For encryption of data during transit, you can enable node-to-node encryption and also enforce HTTPS for the web URL using certificates.

For encryption of data at rest, you can use AWS Key Management Service to store and manage keys. You can create your own or use the one that is provided by AWS. You could protect...