[nemo44x]

"Repackage other open source projects that was already existing?"

Most people don't realize this yet. They are taking other, existing projects which anyone could install themselves for a long time now and framing it like they built these things for their new fork. So much of their "distribution" is just a collection of other open source projects.

In the case of the security functionality, that is backed by a company named Search Guard who have an Enterprise Version in addition to the Community Version included in the AWS fork. They forked another project, renamed it and now call it their own.

[pm215]

Isn't "a collection of other open source projects" pretty much exactly what a "distribution" usually implies? What you get is the curation/selection of what's included and some reassurance that all the pieces really do work together and other people are using them that way.

[rendel]

Amazon has forked more than the community version of Search Guard, see by yourself:

https://github.com/floragunncom/search-guard-enterprise-modu...

https://github.com/opendistro-for-elasticsearch/security-adv...

They just forked the full code base and tried to remove any reference of Search Guard.

I am not sure what really happened here but this smells fishy.