Provisions Amazon OpenSearch Serverless collections with secure defaults — collection type selection (SEARCH, TIMESERIES, VECTORSEARCH), encryption policy with customer-managed KMS (must exist before collection), network policy (public or VPC-only), data lifecycle policy (retention), capacity (OCU, min 4 for HA, auto-scaling), standby replicas, SAML / IAM Identity Center authentication, data access policies (IAM principals), VPC endpoints, vector search (k-NN, faiss, nmslib), semantic search with Bedrock embeddings, and flow frameworks.
