OpenSearch semantic enrichment reached VPC domains on 17 August 2026 with an authorization step AWS did not announce
AWS said no VPC changes were required. The OpenSearch guide says every semantic enrichment index call on a VPC domain returns AccessDeniedException until you run AuthorizeVpcEndpointAccess first.