AWS Security ChangesHomeSearch

AWS AmazonRDS documentation change

Service: AmazonRDS · 2025-04-01 · Documentation low

File: AmazonRDS/latest/UserGuide/Appendix.PostgreSQL.CommonDBATasks.Parameters.md

Summary

Added documentation for new rds.replica_identity_full parameter affecting WAL logging behavior

Security assessment

The parameter documentation explains replication logging behavior and performance impact, but does not address security features or vulnerabilities

Diff

diff --git a/AmazonRDS/latest/UserGuide/Appendix.PostgreSQL.CommonDBATasks.Parameters.md b/AmazonRDS/latest/UserGuide/Appendix.PostgreSQL.CommonDBATasks.Parameters.md
index 0c4369f51..169f6cb91 100644
--- a/AmazonRDS/latest/UserGuide/Appendix.PostgreSQL.CommonDBATasks.Parameters.md
+++ b/AmazonRDS/latest/UserGuide/Appendix.PostgreSQL.CommonDBATasks.Parameters.md
@@ -178,0 +179,5 @@ Parameter name |  Apply_Type |  Description
+`rds.replica_identity_full` | Dynamic | When you set this parameter to `on`, it overrides the replica identity setting to `FULL` for all database tables. This means all column values are written to the write ahead log (WAL), regardless of your `REPLICA IDENTITY FULL` settings.
+
+###### Note
+
+Turning on this parameter may increase your database instance IOPS due to the additional WAL logging.