AWS AmazonRDS high security documentation change
Summary
Added new KMS encryption key access failure/restoration events (RDS-EVENT-0420, 0418, 0419) and maintenance event
Security assessment
Documents scenarios where KMS encryption key access failures could lead to database inaccessibility - directly related to encryption security controls. Events indicate potential security-impacting operational issues.
Diff
diff --git a/AmazonRDS/latest/AuroraUserGuide/USER_Events.Messages.md b/AmazonRDS/latest/AuroraUserGuide/USER_Events.Messages.md index 96de5e727..0052ada4d 100644 --- a/AmazonRDS/latest/AuroraUserGuide/USER_Events.Messages.md +++ b/AmazonRDS/latest/AuroraUserGuide/USER_Events.Messages.md @@ -125,0 +126 @@ availability | RDS-EVENT-0022 | Error restarting mysql: `message`. | An error h +availability | RDS-EVENT-0420 | Amazon RDS has been unable to access the KMS encryption key for database instance `name`. This database will be placed into an inaccessible state. Please refer to the troubleshooting section in the Amazon RDS documentation for further details. | None @@ -145,0 +147,2 @@ failure | RDS-EVENT-0353 | The DB instance can't be created because of insuffic +failure | RDS-EVENT-0418 | Amazon RDS is unable to access the KMS encryption key for database instance `name`. This is likely due to the key being disabled or Amazon RDS being unable to access it. If this continues the database will be placed into an inaccessible state. Please refer to the troubleshooting section in the Amazon RDS documentation for further details. | None +failure | RDS-EVENT-0419 | Amazon RDS can now successfully access the KMS encryption key for database instance `name`. | None @@ -153,0 +157 @@ maintenance | RDS-EVENT-0178 | Database instance upgrade is in progress. | None +maintenance | RDS-EVENT-0422 | RDS will replace the host of DB instance `name` due to a pending maintenance action. | None