Amazon OpenSearch UI now supports Network Access Control

Amazon OpenSearch Service now supports network access controls for OpenSearch UI applications, enabling restriction of access to approved networks.

• Use IAM condition keys (aws:SourceVpce, aws:SourceVpc, aws:SourceIp) to control network access
• Enforce restrictions at three levels: identity-based policies, VPC endpoint policies, and resource control policies
• Resource control policies block off-network users before authentication across entire AWS organizations
• Available in all AWS Regions where OpenSearch UI is offered

Network access controls help establish consistent data perimeters and prevent unauthorized access to OpenSearch UI applications.