aws-opensearch-index-document-data-plane
OpenSearch indexes store arbitrary JSON documents and are commonly used for logs containing credentials or sensitive fields.
Where it sits
| location | OpenSearch _search/_mget response _source fields |
| location kind | data_record |
| data kinds | credential password api_key bearer_token customer_data pii sensitive_data |
| emits edge | CanReadData |
| service | OpenSearch (aws:opensearch) |
Collection recipe
| access mode | data_plane |
| operation | HTTP GET/POST /<index>/_search |
| response path | hits.hits[]._source |
| encoding | json |
| params | {"DomainEndpoint": "\u003cendpoint\u003e", "Index": "\u003cindex\u003e", "Query": "\u003cquery\u003e"} |
Required permissions
es:ESHttpGet
es:ESHttpPost
References