diff --git a/roles/opensearch/opensearch/security.sls b/roles/opensearch/opensearch/security.sls
--- a/roles/opensearch/opensearch/security.sls
+++ b/roles/opensearch/opensearch/security.sls
@@ -16,6 +16,7 @@
     - source: salt://roles/opensearch/opensearch/files/internal_users.yml.jinja
     - user: opensearch
     - group: opensearch
+    - mode: 0600
     - template: jinja
     - context:
         users: