Amazon OpenSearch Service now supports JWKS URL configuration for JWT authentication

This article announces JWKS URL configuration support for JWT authentication in Amazon OpenSearch Service.

• OpenSearch domains automatically fetch and validate public keys from identity provider JWKS endpoints
• Eliminates manual public key configuration and updates when keys rotate
• Includes built-in security validation checks and error messaging
• Requires OpenSearch version 3.3 or later
• Configurable via console, AWS CLI, CreateDomain, and UpdateDomainConfig APIs
• Available in all AWS Regions where OpenSearch Service operates

This enhancement simplifies JWT authentication management by automating key retrieval and validation from identity providers.