Amazon OpenSearch Service now supports two new third party plugins- encryption plugin from Portal26.ai and Name Match plugin from Babel Street. These are optional plugins that you can choose to associate with your OpenSearch Service clusters.
The encryption plugin from Portal26.ai uses NIST FIPS 140-2 certified encryption to encrypt the data as it gets indexed by the Amazon OpenSearch Service. This plugin includes a Bring Your Own Key (BYOK) capability allowing you to setup separate encryption keys per index thus enabling you to easily support multi-tenant use-cases.
Babel Street Match Plugin for OpenSearch accurately matches names, organisations, addresses, and dates in over 24 languages, enhancing security operations and regulatory compliance while reducing false positives and increasing operational efficiency.
You can use the AWS Management Console and AWS CLI to associate, disassociate and list third party plugins in your domain. Customers can now use “CreatePackage” and “AssociatePackage” APIs to upload and associate the plugin with the Amazon OpenSearch Service cluster. ‘PACKAGE-CONFIG“ and ”PACKAGE-LICENSE“ package types are supported for uploading the plugin configuration and license files that you can directly procure from Portal26.ai for the encryption plugin, and Babel Street for the name match plugin.
These third party plugins are available for Amazon OpenSearch domains running OpenSearch version 2.15 and above, and are available in all AWS regions except AWS GovCloud (US) Regions where Amazon OpenSearch service is available.
For more information about third party plugins, please see the documentation. To learn more about Amazon OpenSearch Service, please visit the product page.
Source:: Amazon AWS