Amazon OpenSearch Service adds network access controls, extends version support

Amazon OpenSearch Service introduced network access controls for OpenSearch UI applications. Customers can now restrict UI access to approved networks using existing IAM condition keys (aws:SourceVpce, aws:SourceVpc, aws:SourceIp). Controls can be applied at three levels—identity‑based policies, VPC endpoint policies, and resource control policies—allowing off‑network users to be blocked before authentication. The feature is available in all AWS regions where OpenSearch UI is offered.

In a separate announcement, Amazon OpenSearch Service extended security and operating‑system patch coverage for legacy Elasticsearch and OpenSearch engine versions. Coverage for specified versions now runs an additional 12 months, through 7 November 2027, with a surcharge equal to instance pricing starting 7 November 2026. The extended‑support list includes Elasticsearch 1.5‑7.8, OpenSearch 1.0‑1.2, 2.3‑2.9, and additional newer versions. Customers are encouraged to upgrade to the latest OpenSearch releases for better performance and security.