AWS AmazonRDS documentation change
Summary
Updated secret naming formats in AWS Secrets Manager documentation and clarified steps to locate credentials
Security assessment
Changes clarify secret naming conventions for credential storage but do not indicate a security vulnerability fix. Enhances documentation about security feature (Secrets Manager usage).
Diff
diff --git a/AmazonRDS/latest/UserGuide/custom-creating.sysdba.md b/AmazonRDS/latest/UserGuide/custom-creating.sysdba.md index 7368b546d..8da4944b2 100644 --- a//AmazonRDS/latest/UserGuide/custom-creating.sysdba.md +++ b//AmazonRDS/latest/UserGuide/custom-creating.sysdba.md @@ -20 +20,3 @@ After you create your RDS Custom DB instance, you can log in to your Oracle data -Your can log in to your Oracle database as `SYS` or `SYSTEM` or by specifying the master user name in an API call. The password for `SYS` and `SYSTEM` is stored in Secrets Manager. The secret uses the naming format do-not-delete-rds-custom-`resource_id`-`uuid`. You can find the password using the AWS Management Console. +Your can log in to your Oracle database as `SYS` or `SYSTEM` or by specifying the master user name in an API call. The password for `SYS` and `SYSTEM` is stored in Secrets Manager. + +The secret uses the naming format `do-not-delete-rds-custom-`resource_id`-`uuid`` or `rds-custom!oracle-do-not-delete-`resource_id`-`uuid``. You can find the password using the AWS Management Console. @@ -42 +44,3 @@ Your can log in to your Oracle database as `SYS` or `SYSTEM` or by specifying th - 2. Filter the secrets by the resource ID that you copied in step 5. + 2. Filter the secrets by the resource ID that you copied in step 2.d. + + 3. Choose the secret that uses the naming format **do-not-delete-rds-custom-`resource_id`-`uuid`** or **rds-custom!oracle-do-not-delete-`resource_id`-`uuid`**. The `resource_id` is the resource ID that you copied in step 2.d. @@ -44 +48 @@ Your can log in to your Oracle database as `SYS` or `SYSTEM` or by specifying th - 3. Choose the secret named **do-not-delete-rds-custom-`resource_id`-`uuid`**, where `resource_id` is the resource ID that you copied in step 5. For example, if your resource ID is **db-ABC12CDE3FGH4I5JKLMNO6PQR7** , your secret will be named **do-not-delete-rds-custom-db-ABC12CDE3FGH4I5JKLMNO6PQR7**. +For example, if your resource ID is **db-ABC12CDE3FGH4I5JKLMNO6PQR7** and your UUID is **1234ab** , your secret is named **do-not-delete-rds-custom-db-ABC12CDE3FGH4I5JKLMNO6PQR7-1234ab** or **rds-custom!oracle-do-not-delete-db-ABC12CDE3FGH4I5JKLMNO6PQR7-1234ab**.