Shikhar Jain

[FEATURE/BUG] IP rate-limiting should support limiting based on remote client headers (e.g. header like X-Forwarded-For)

1

**Is your feature request related to a problem?** Yes, Currently IP-rate limiting works solely on client IP addresses; it doesn't support setups where access to OpenSearch is configured via dashboards...

[BUG] Audit logging fails to log the request if Rest request is invalid

7

**What is the bug?** Audit logging doesn't log a failed request if request body fails to match content-type header or required parameters. For example, if request body logging is enabled...

Remove whitelist settings in favor of allowlist

1

### Description * Category (Enhancement, New feature, Bug fix, Test fix, Refactoring, Maintenance, Documentation) Maintenance * Why these changes are required? Removal of non-inclusive keywords from OpenSearch - https://opensearch.org/docs/latest/breaking-changes/#deprecate-non-inclusive-terms. Aligned...

Migrate from com.amazon.dlic to org.opensearch.security package

1

### Description * Category (Enhancement, New feature, Bug fix, Test fix, Refactoring, Maintenance, Documentation) Refactoring * Why these changes are required? The classes were originally part of https://github.com/opendistro-for-elasticsearch/deprecated-security-advanced-modules and not...

Deprecate opendistro_security_roles and add opensearch_security_roles

1

### Description Deprecate opendistro_security_roles and add opensearch_security_roles for internal-user APIs. * Category (Enhancement, New feature, Bug fix, Test fix, Refactoring, Maintenance, Documentation) Maintenance * Why these changes are required? https://github.com/opensearch-project/security/issues/5092...

Deprecate opendistro in API requests and responses

1

Is your feature request related to a problem? https://github.com/opensearch-project/security/issues/5092 The security repo has lingering usages of the legacy terms like ``opendistro_security`` is API requests and responses, these should be replaced...

Deprecate opendistro API paths

1

**Is your feature request related to a problem?** https://github.com/opensearch-project/security/issues/5092 The security repo has lingering usages of the legacy terms like ``opendistro`` is API paths, these are replaced with ``/_plugins/_security``, however...

### Description [Describe what this change achieves] * Category (Enhancement, New feature, Bug fix, Test fix, Refactoring, Maintenance, Documentation) Refactoring * Why these changes are required? This change removes hard-coded...