- Added index-level encryption allowing each index to be encrypted with its own customer‑managed KMS key
- Supports per‑tenant data protection by registering multiple keys and selecting them per index via Native encryption mode
- Available on OpenSearch 3.3+ in 14 regions with no extra charge beyond standard KMS/OpenSearch fees