AWS dms documentation change
Summary
Increased maximum value for ReadAheadBlocks parameter from 200,000 to 2,000,000
Security assessment
Adjusts a performance tuning parameter for storage read operations, with no direct security implications or security feature additions.
Diff
diff --git a/dms/latest/userguide/CHAP_Source.Oracle.md b/dms/latest/userguide/CHAP_Source.Oracle.md index 73224a7ad..51b861d50 100644 --- a//dms/latest/userguide/CHAP_Source.Oracle.md +++ b//dms/latest/userguide/CHAP_Source.Oracle.md @@ -1365 +1365 @@ Here, `/u01/oracle/product/12.2.0/dbhome_1/data/wallet/` is the wallet location. - 2. Get the master key ID using one of the following encryption options, depending on which one returns this value. + 2. Get the master key ID for either Non-CDB or CDB source as follows: @@ -1367 +1367 @@ Here, `/u01/oracle/product/12.2.0/dbhome_1/data/wallet/` is the wallet location. - 1. For table or column-level encryption, run the following queries. + 1. For non-CDB source run the following query to retrieve Master encryption key ID: @@ -1369,2 +1369 @@ Here, `/u01/oracle/product/12.2.0/dbhome_1/data/wallet/` is the wallet location. - SQL> SELECT OBJECT_ID FROM ALL_OBJECTS - WHERE OWNER='DMS_USER' AND OBJECT_NAME='TEST_TDE_COLUMN' AND OBJECT_TYPE='TABLE'; + SQL> select rownum, key_id, activation_time from v$encryption_keys; @@ -1372,4 +1371,5 @@ Here, `/u01/oracle/product/12.2.0/dbhome_1/data/wallet/` is the wallet location. - OBJECT_ID - --------------- - 81046 - SQL> SELECT MKEYID FROM SYS.ENC$ WHERE OBJ#=81046; + ROWNUM KEY_ID ACTIVATION_TIME + ------ ------------------------------------------------------ --------------- + 1 AeKask0XZU+NvysflCYBEVwAAAAAAAAAAAAAAAAAAAAAAAAAAAAA 04-SEP-24 10.20.56.605200 PM +00:00 + 2 AV7WU9uhoU8rv8daE/HNnSwAAAAAAAAAAAAAAAAAAAAAAAAAAAAA 10-AUG-21 07.52.03.966362 PM +00:00 + 3 AckpoJ/f+k8xvzJ+gSuoVH4AAAAAAAAAAAAAAAAAAAAAAAAAAAAA 14-SEP-20 09.26.29.048870 PM +00:00 @@ -1377,3 +1377 @@ Here, `/u01/oracle/product/12.2.0/dbhome_1/data/wallet/` is the wallet location. - MKEYID - ------------ - AWGDC9glSk8Xv+3bVveiVSgAAAAAAAAAAAAAAAAAAAAAAAAAAAAA +Activation time is useful if you plan to start CDC from some point in the past. For example, using the above results, you can start CDC from some point between 10-AUG-21 07.52.03 PM and 14-SEP-20 09.26.29 PM using the Master Key ID in ROWNUM 2. When the task reaches the redo generated on or after 14-SEP-20 09.26.29 PM it fails, you must modify the source endpoint, provide the Master key ID in ROWNUM 3, and then resume the task. @@ -1381,24 +1379 @@ Here, `/u01/oracle/product/12.2.0/dbhome_1/data/wallet/` is the wallet location. -Here, `AWGDC9glSk8Xv+3bVveiVSg` is the master key ID (`MKEYID`). If you get a value for `MKEYID`, you can continue with Step 3. Otherwise, continue with Step 2.2. - -###### Note - -The trailing string `'A'` characters (`AAA...`) is not part of the value. - - 2. For tablespace-level encryption, run the following queries. - - SQL> SELECT TABLESPACE_NAME, ENCRYPTED FROM dba_tablespaces; - TABLESPACE_NAME ENC - ------------------------------ --- - SYSTEM NO - SYSAUX NO - UNDOTBS1 NO - TEMP NO - USERS NO - TEST_ENCRYT YES - SQL> SELECT name,utl_raw.cast_to_varchar2( utl_encode.base64_encode('01'||substr(mkeyid,1,4))) || utl_raw.cast_to_varchar2( utl_encode.base64_encode(substr(mkeyid,5,length(mkeyid)))) masterkeyid_base64 - FROM (SELECT t.name, RAWTOHEX(x.mkid) mkeyid FROM v$tablespace t, x$kcbtek x WHERE t.ts#=x.ts#) - WHERE name = 'TEST_ENCRYT'; - - NAME MASTERKEYID_BASE64 - ------------------------------ ---------------------------------- - TEST_ENCRYT AWGDC9glSk8Xv+3bVveiVSg= + 2. For CDB source DMS requires CDB$ROOT Master encryption key. Connect to CDB$ROOT and execute the following query: @@ -1405,0 +1381 @@ The trailing string `'A'` characters (`AAA...`) is not part of the value. + SQL> select rownum, key_id, activation_time from v$encryption_keys where con_id = 1; @@ -1407 +1383,3 @@ The trailing string `'A'` characters (`AAA...`) is not part of the value. -Here, `AWGDC9glSk8Xv+3bVveiVSg` is the master key ID (`TEST_ENCRYT`). If both steps 2.1 and 2.2 return a value, they are always identical. + ROWNUM KEY_ID ACTIVATION_TIME + ------ ---------------------------------------------------- ----------------------------------- + 1 Aa2E/Vwb5U+zv5hCncS5ErMAAAAAAAAAAAAAAAAAAAAAAAAAAAAA 29-AUG-24 12.51.19.699060 AM +00:00 @@ -1409 +1386,0 @@ Here, `AWGDC9glSk8Xv+3bVveiVSg` is the master key ID (`TEST_ENCRYT`). If both st -The trailing `'='` character is not part of the value. @@ -1641 +1618 @@ When you set `OpenTransactionWindow` to 1 or higher, DMS uses `SCN_TO_TIMESTAMP` -`ReadAheadBlocks` | Set this attribute to change the number of read-ahead blocks that DMS configures to perform CDC using Oracle Automatic Storage Management (ASM) and non-ASM NAS storage. You can specify an integer value between 1000 (the default) and 200,000 (the maximum). Use this attribute together with the `ParallelASMReadThreads` attribute. For more information, see Configuring a CDC task to use Binary Reader with an RDS for Oracle source for AWS DMS. Default value: 1000 Valid values: An integer from 1000 to 200,000 Example: `--oracle-settings '{"ReadAheadBlocks": 150000}'` +`ReadAheadBlocks` | Set this attribute to change the number of read-ahead blocks that DMS configures to perform CDC using Oracle Automatic Storage Management (ASM) and non-ASM NAS storage. You can specify an integer value between 1000 (the default) and 2,000,000 (the maximum). Use this attribute together with the `ParallelASMReadThreads` attribute. For more information, see Configuring a CDC task to use Binary Reader with an RDS for Oracle source for AWS DMS. Default value: 1000 Valid values: An integer from 1000 to 2,000,000 Example: `--oracle-settings '{"ReadAheadBlocks": 150000}'`