Create FIPS-compliant VPC endpoints for OpenSearch Serverless

When you create a VPC endpoint for OpenSearch Serverless, you can configure it to use FIPS-compliant cryptographic algorithms. This section describes how to create and configure FIPS-compliant VPC endpoints for OpenSearch Serverless.

Prerequisites

Before you begin, make sure that you have an AWS account with appropriate permissions to create Amazon VPC endpoints, an Amazon VPC where you want to create the endpoint, subnets within the Amazon VPC where the endpoint will be available, and security groups that allow traffic to and from the endpoint.

Create a FIPS-compliant VPC endpoint for OpenSearch Serverless

To create a FIPS-compliant VPC endpoint

1. Sign in to the AWS Management Console and open the Amazon VPC console at https://console.aws.amazon.com/vpc/.

2. In the navigation pane, choose Endpoints.

3. Choose Create endpoint.

4. For Service category, choose AWS services.

5. In the Service Name search box, enter opensearchserverless and select the FIPS endpoint option with the following format: com.amazonaws.region.aoss-fips

   For example: com.amazonaws.us-east-1.aoss-fips

6. Choose the Amazon VPC where you want to create the endpoint.

7. Select the subnets where you want to create endpoint network interfaces.

8. For Security groups, select the security groups to associate with the endpoint network interfaces.

9. For Policy, you can choose Full access to allow all operations by all principals on all resources through this endpoint, or choose Custom to attach a custom endpoint policy that restricts access.

10. Choose Create endpoint.