Adding Security Reporting Instructions in README.md file Signed-off-b…

…y: Rishikesh Reddy Pasham rishireddy1159@gmail.com (#1326)

Signed-off-by: Rishikesh Pasham <rishireddy1159@gmail.com>

README.md

@@ -3,6 +3,7 @@
 - [Welcome!](#welcome)
 - [Project Resources](#project-resources)
 - [Code of Conduct](#code-of-conduct)
+- [Security](#security)
 - [License](#license)
 - [Copyright](#copyright)
 
@@ -13,7 +14,7 @@
 ## Project Resources
 
 * [Project Website](https://opensearch.org/)
-* [Downloads](https://opensearch.org/downloads.html).
+* [Downloads](https://opensearch.org/downloads.html)
 * [Documentation](https://opensearch.org/docs/)
 * Need help? Try [Forums](https://discuss.opendistrocommunity.dev/)
 * [Project Principles](https://opensearch.org/#principles)
@@ -28,6 +29,9 @@
 
 This project has adopted the [Amazon Open Source Code of Conduct](CODE_OF_CONDUCT.md). For more information see the [Code of Conduct FAQ](https://aws.github.io/code-of-conduct-faq), or contact [opensource-codeofconduct@amazon.com](mailto:opensource-codeofconduct@amazon.com) with any additional questions or comments.
 
+## Security
+If you discover a potential security issue in this project we ask that you notify AWS/Amazon Security via our [vulnerability reporting page](http://aws.amazon.com/security/vulnerability-reporting/) or directly via email to aws-security@amazon.com. Please do **not** create a public GitHub issue.
+
 ## License
 
 This project is licensed under the [Apache v2.0 License](LICENSE.txt).