From 700649e6f546d98dabed90718c4c866ca914a976 Mon Sep 17 00:00:00 2001 From: Jeff Huss Date: Mon, 19 Dec 2022 11:25:28 -0800 Subject: [PATCH] Added warning about restoring opendistro_security index through snapshot restore (#2258) Signed-off-by: JeffH-AWS Signed-off-by: JeffH-AWS --- _opensearch/snapshots/snapshot-restore.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/_opensearch/snapshots/snapshot-restore.md b/_opensearch/snapshots/snapshot-restore.md index f3be7512..7ca8ef56 100644 --- a/_opensearch/snapshots/snapshot-restore.md +++ b/_opensearch/snapshots/snapshot-restore.md @@ -381,3 +381,6 @@ The `.opendistro_security` index contains sensitive data, so we recommend exclud ```bash curl -k --cert ./kirk.pem --key ./kirk-key.pem -XPOST 'https://localhost:9200/_snapshot/my-repository/3/_restore?pretty' ``` + +We strongly recommend against restoring `.opendistro_security` using an admin certificate because doing so can alter the security posture of the entire cluster. See [A word of caution]({{site.url}}{{site.baseurl}}/security-plugin/configuration/security-admin/#a-word-of-caution) for a recommended process to back up and restore your security plugin configuration. +{: .warning} \ No newline at end of file