Next.js with Amazon OpenSearch

Amazon OpenSearch Serverless Demo

This demo uses Amazon OpenSearch Serverless with Next.js to showcase full-text recipe search with facets, highlighting, and autocomplete. It connects securely using AWS SigV4 authentication, with credentials obtained via Vercel OIDC — no static AWS keys required.

How auth works

The app uses @vercel/oidc to read Vercel's short-lived OIDC token and exchanges it for AWS credentials via STS AssumeRoleWithWebIdentity (fromWebToken in the AWS SDK). On Vercel, VERCEL_OIDC_TOKEN is injected automatically; locally, vercel env pull writes one valid for ~12 hours.

Requirements

• An Amazon OpenSearch Serverless Search collection
• An IAM role whose trust policy allows Vercel's OIDC issuer (https://oidc.vercel.com/<team-slug>) and whose policy grants aoss:APIAccessAll on the collection. The Vercel AWS OpenSearch integration creates this role automatically and exposes it as the env vars below.
• Node.js 18+

Environment variables

Provisioned automatically when you install the Vercel AWS OpenSearch integration. After vercel env pull .env.local you should see:

Configure the IAM role trust policy

1
{
2
  "Version": "2012-10-17",
3
  "Statement": [
4
    {
5
      "Effect": "Allow",
6
      "Principal": { "Federated": "arn:aws:iam::<account-id>:oidc-provider/oidc.vercel.com/<team-slug>" },
7
      "Action": "sts:AssumeRoleWithWebIdentity",
8
      "Condition": {
9
        "StringEquals": {
10
          "oidc.vercel.com/<team-slug>:aud": "https://vercel.com/<team-slug>"
11
        }
12
      }
13
    }
14
  ]
15
}

Local Setup

1. Install dependencies:

1
npm install

1. Link the project and pull env vars (this provisions VERCEL_OIDC_TOKEN):

1
vercel link
2
vercel env pull .env.local

1. Seed the recipe index:

1
npm run seed

1. Start the development server:

1
npm run dev

1. View local development: http://localhost:3000

The local OIDC token expires after ~12 hours. If you see AWS auth errors mid-session, re-run vercel env pull .env.local --yes.

Learn More

• Vercel OIDC Federation
• @vercel/oidc on npm
• Amazon OpenSearch Serverless
• OpenSearch Query DSL
• Next.js Documentation