AWS Security ChangesHomeSearch

AWS prescriptive-guidance medium security documentation change

Service: prescriptive-guidance · 2025-03-26 · Security-related medium

File: prescriptive-guidance/latest/patterns/implement-sha1-hashing-for-pii-data-when-migrating-from-sql-server-to-postgresql.md

Summary

Removed 'Additional information' section that previously discussed SHA1 hashing security considerations and alternative algorithms

Security assessment

Removal of guidance about SHA1 hashing (a deprecated cryptographic algorithm) and security considerations for sensitive data handling indicates addressing security concerns. SHA1 is known to be cryptographically weak.

Diff

diff --git a/prescriptive-guidance/latest/patterns/implement-sha1-hashing-for-pii-data-when-migrating-from-sql-server-to-postgresql.md b/prescriptive-guidance/latest/patterns/implement-sha1-hashing-for-pii-data-when-migrating-from-sql-server-to-postgresql.md
index 9b1e8290c..67345577d 100644
--- a/prescriptive-guidance/latest/patterns/implement-sha1-hashing-for-pii-data-when-migrating-from-sql-server-to-postgresql.md
+++ b/prescriptive-guidance/latest/patterns/implement-sha1-hashing-for-pii-data-when-migrating-from-sql-server-to-postgresql.md
@@ -5 +5 @@
-SummaryPrerequisites and limitationsArchitectureToolsBest practicesEpicsTroubleshootingRelated resourcesAdditional information
+SummaryPrerequisites and limitationsArchitectureToolsBest practicesEpicsTroubleshootingRelated resources
@@ -285 +285 @@ Issue| Solution
-Hash values don’t match.| Verify character encodings and collations between source and target. For more information, see [Manage collation changes in PostgreSQL on Amazon](https://aws.amazon.com/blogs/database/manage-collation-changes-in-postgresql-on-amazon-aurora-and-amazon-rds/) Aurora and Amazon RDS (AWS Blog).  
+Hash values don’t match.| Verify character encodings and collations between source and target. For more information, see [Manage collation changes in PostgreSQL on Amazon Aurora and Amazon RDS](https://aws.amazon.com/blogs/database/manage-collation-changes-in-postgresql-on-amazon-aurora-and-amazon-rds/) (AWS Blog).  
@@ -309,4 +308,0 @@ Hash values don’t match.| Verify character encodings and collations between so
-## Additional information
-
-This pattern focuses on SHA1 hashing, but can be adapted for other hashing algorithms supported by PostgreSQL's pgcrypto module. Always consider the security implications of your hashing strategy and consult with security experts if handling sensitive data.
-