OpenSearch data and search boundary

Evidence-backed facts

1. OpenSearch security separates encryption, authentication, access control, and audit logging rather than treating login as the complete security boundary. informative
2. Roles can restrict cluster, index, document, and field access, so authenticated search results reflect configured authorization boundaries. informative
3. Index writes, cluster settings, snapshots, and administrative actions require explicit role permissions separate from read or search access. informative
4. Demo certificates or default passwords are not production evidence; documentation creates no secured cluster, role mapping, encrypted storage, audit trail, or successful query. informative

Primary sources