Amazon OpenSearch Service enhanced security by enabling network access controls for OpenSearch UI applications. This feature allows customers to restrict access based on approved networks using IAM condition keys like aws:SourceVpce, aws:SourceVpc, and aws:SourceIp, facilitating consistent perimeter security within AWS environments. Network controls can be enforced via identity policies, VPC endpoint policies, and resource control policies across organizational accounts.
With resource control policies, off-network users can be blocked before authentication, securing the login page against unauthorized external access. The network control capability is available in all AWS regions where OpenSearch UI is offered, providing an additional layer of access governance without impacting existing authentication mechanisms.
Source & further reading
Amazon OpenSearch UI now supports Network Access Control ↗Source published 2026-08-06. This report was prepared with AI assistance from the linked primary-source material. Claims and limitations should be checked against the original announcement or research.