Posted On: Nov 14, 2024

Amazon OpenSearch Service now supports two new third party plugins- encryption plugin from Portal26.ai and Name Match plugin from Babel Street. These are now available as optional plugins that you can associate with your Amazon OpenSearch Service clusters.  

The encryption plugin from Portal26.ai uses NIST FIPS 140-2 certified encryption to encrypt the data as it gets indexed by the Amazon OpenSearch Service. This plugin includes a Bring Your Own Key (BYOK) capability allowing you to setup separate encryption keys per index thus enabling you to easily support multi-tenant use-cases.  

Babel Street Match Plugin for OpenSearch accurately matches names, organizations, addresses, and dates in over 24 languages, enhancing security operations and regulatory compliance while reducing false positives and increasing operational efficiency.

You can use the Amazon Web Services Management Console and Amazon CLI to associate, disassociate and list third party plugins in your domain. Customers can now use “CreatePackage” and “AssociatePackage” APIs to upload and associate the plugin with the Amazon OpenSearch Service cluster. ‘PACKAGE-CONFIG“ and ”PACKAGE-LICENSE“ package types are supported for uploading the plugin configuration and license files that you can directly procure from Portal26.ai for the encryption plugin, and Babel Street for the name match plugin

These third party plugins are available for Amazon OpenSearch domains running OpenSearch version 2.15 and above, and are available in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD.

For more information about third party plugins, please see the documentation. To learn more about Amazon OpenSearch Service, please visit the product page.