From 9c8280d98012abab536fe202097b1ca0b2ba6f30 Mon Sep 17 00:00:00 2001
From: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
Date: Mon, 27 May 2024 10:03:58 -0400
Subject: [PATCH] fix(opensearch): handle non existing SAMLOptions in domain
 (#4086)

---
 .../aws/services/opensearch/opensearch_service.py         | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/prowler/providers/aws/services/opensearch/opensearch_service.py b/prowler/providers/aws/services/opensearch/opensearch_service.py
index cee8005266..0bc941ae33 100644
--- a/prowler/providers/aws/services/opensearch/opensearch_service.py
+++ b/prowler/providers/aws/services/opensearch/opensearch_service.py
@@ -117,9 +117,11 @@ class OpenSearchService(AWSService):
                 domain.internal_user_database = describe_domain["DomainStatus"][
                     "AdvancedSecurityOptions"
                 ]["InternalUserDatabaseEnabled"]
-                domain.saml_enabled = describe_domain["DomainStatus"][
-                    "AdvancedSecurityOptions"
-                ]["SAMLOptions"]["Enabled"]
+                domain.saml_enabled = (
+                    describe_domain["DomainStatus"]["AdvancedSecurityOptions"]
+                    .get("SAMLOptions", {})
+                    .get("Enabled", False)
+                )
                 domain.update_available = describe_domain["DomainStatus"][
                     "ServiceSoftwareOptions"
                 ]["UpdateAvailable"]