Amazon OpenSearch Service now supports JSON Web Key Set (JWKS) URL configuration for JWT authentication. You can configure a JWKS URL as part of your JWT authentication setup, allowing your OpenSearch domains to automatically fetch and validate public keys from your identity provider’s JWKS endpoint.
Previously, JWT authentication required you to manually configure and update static public keys. With JWKS URL support, your domains automatically retrieve the latest public keys from your identity provider, eliminating the need to manually update keys when your identity provider rotates signing keys. The configuration includes built-in security validation checks and clear error messaging to help troubleshoot issues.
JWKS URL support requires OpenSearch version 3.3 or later. You can set up JWKS URL configuration using the Amazon OpenSearch Service console, the AWS CLI, or the CreateDomain and UpdateDomainConfig APIs.
JWKS URL configuration for JWT authentication is available in all AWS Regions where Amazon OpenSearch Service is available. To learn more, see JWT authentication and authorization in the Amazon OpenSearch Service Developer Guide.
Categories: general:products/amazon-opensearch-service,marketing:marchitecture/analytics
Source: Amazon Web Services
Latest Posts
- MC1455035: Power Pages Rolls Out Early Upgrade to Version 9.8.8.5 with Performance and Security Fixes
- MC1455050: Power Platform Adds GitHub Support for Source Code Integration with Enhanced APIs and Performance
- MC1455051: Dynamics 365 Customer Service and Contact Center Adds Workforce Alerts for Intraday Volume Spikes
- Workers, Access – You can now enable Access on a Worker or all Workers at once
