aws AWS Big Data Blog ·

Simplified Private Network Connectivity for Amazon OpenSearch Serverless

blognetworkingawsgaarchitect
feature

Amazon OpenSearch Serverless now utilizes standard AWS PrivateLink interface endpoints with native private DNS for private access to collections. This significantly simplifies network connectivity patterns that previously required extensive multi-step DNS orchestration and custom setups. Engineers and architects implementing private access from VPCs or on-premises environments will find the process much easier. The change applies to collection data endpoints, supporting both per-collection and regional per-account endpoints, aligning connectivity with other AWS services.

  • Simplified PrivateLink for OpenSearch Serverless
  • Architectural Patterns for Private Access
Enhancements (1)
  • Simplified PrivateLink for OpenSearch Serverless

    Amazon OpenSearch Serverless now uses standard AWS PrivateLink interface endpoints and native private DNS for collection access, replacing previous complex DNS orchestration. This provides consistent connectivity patterns akin to other AWS services, leveraging the `com.amazonaws.<region>.aoss-data` service name.

Notes (1)
  • Architectural Patterns for Private Access

    The article outlines various architectural patterns for private connectivity to OpenSearch Serverless, including single VPC, multi-VPC, cross-account, and on-premises access scenarios. It demonstrates DNS resolution and data traffic flow for each, supporting both per-collection and regional per-account endpoints for data access.

Read the original announcement →

https://aws.amazon.com/blogs/big-data/network-connectivity-patterns-for-the-next-generation-of-amazon-opensearch-serverless/

Related releases