Amazon OpenSearch UI now supports Network Access Control

Amazon OpenSearch Service now supports network access controls for OpenSearch UI applications. OpenSearch UI is the fully managed web service for search, analytics, and unified observability across multiple AWS data sources. With network access controls, you can restrict access to your OpenSearch UI applications to approved networks using the same IAM condition keys (aws:SourceVpce, aws:SourceVpc, and aws:SourceIp) that you already use elsewhere in AWS, helping you establish a consistent data perimeter across your environment.

You can enforce network restrictions at three levels: identity-based policies for specific principals, VPC endpoint policies to control which applications users reach through an endpoint, and resource control policies (RCPs) to enforce access uniformly across every account in your AWS organization. With RCPs, you can block off-network users before they authenticate, preventing anyone outside your corporate network or VPC from reaching the login page.

Network access controls are available in all AWS Regions where OpenSearch UI is available. To learn more, see Restricting network access to OpenSearch UI applications in the Amazon OpenSearch Service Developer Guide. For more information about Amazon OpenSearch Service, see the Amazon OpenSearch Service product page.