AWS dms documentation change
Summary
Added multiple new premigration validation checks including data masking compatibility, index configurations, and LOB mode requirements
Security assessment
The changes add validation rules to prevent incompatible security-related settings (data masking with validation) and ensure secure configurations. While related to security best practices, there's no evidence of addressing a specific vulnerability.
Diff
diff --git a/dms/latest/userguide/CHAP_Tasks.AssessmentReport.Db2.md b/dms/latest/userguide/CHAP_Tasks.AssessmentReport.Db2.md index 6df11ee68..13f106531 100644 --- a//dms/latest/userguide/CHAP_Tasks.AssessmentReport.Db2.md +++ b//dms/latest/userguide/CHAP_Tasks.AssessmentReport.Db2.md @@ -5 +5 @@ -Validate if the IBM Db2 LUW database is configured to be recoverable.Validate if the DMS user has the required permissions on the source database to perform a full-loadValidate if the DMS user has the required permissions on the source database to perform CDCValidate if the source IBM Db2 LUW source table has Db2 XML data typeValidate if the source IBM Db2 LUW version is supported by AWS DMSValidate if the target IBM Db2 LUW version is supported by AWS DMSCheck Transformation Rule for Digits RandomizeCheck Transformation Rule for Digits maskCheck Transformation Rule for Hashing mask +Validate if the IBM Db2 LUW database is configured to be recoverable.Validate if the DMS user has the required permissions on the source database to perform a full-loadValidate if the DMS user has the required permissions on the source database to perform CDCValidate if the source IBM Db2 LUW source table has Db2 XML data typeValidate if the source IBM Db2 LUW version is supported by AWS DMSValidate if the target IBM Db2 LUW version is supported by AWS DMSCheck Transformation Rule for Digits RandomizeCheck Transformation Rule for Digits maskCheck Transformation Rule for Hashing maskVerify that Data Validation task settings and Data Masking Digit randomization are not enabled simultaneouslyVerify that Data Validation task settings and Data Masking Hashing mask are not enabled simultaneouslyVerify that Data Validation task settings and Data Masking Digit mask are not enabled simultaneouslyVerify that target tables have the correct index configuration (Primary Key or Unique Index, not both) for Batch Apply compatibilityValidate that only ‘Limited LOB mode’ is used when BatchApplyEnabled is set to trueValidate if secondary indexes are disabled on the target database during full-load @@ -30,0 +31,12 @@ This section describes individual premigration assessments for migration tasks t + * Verify that Data Validation task settings and Data Masking Digit randomization are not enabled simultaneously + + * Verify that Data Validation task settings and Data Masking Hashing mask are not enabled simultaneously + + * Verify that Data Validation task settings and Data Masking Digit mask are not enabled simultaneously + + * Verify that target tables have the correct index configuration (Primary Key or Unique Index, not both) for Batch Apply compatibility + + * Validate that only ‘Limited LOB mode’ is used when BatchApplyEnabled is set to true + + * Validate if secondary indexes are disabled on the target database during full-load + @@ -87,0 +100,36 @@ This assessment validates whether any of the columns used in the table mapping a +## Verify that Data Validation task settings and Data Masking Digit randomization are not enabled simultaneously + +**API key** : `all-to-all-validation-with-datamasking-digits-randomize` + +This premigration assessment verifies that Data Validation setting and Data Masking Digit randomization are not simultaneously enabled, as these features are incompatible. + +## Verify that Data Validation task settings and Data Masking Hashing mask are not enabled simultaneously + +**API key** : `all-to-all-validation-with-datamasking-hash-mask` + +This premigration assessment verifies that Data Validation setting and Data Masking Hashing mask are not simultaneously enabled, as these features are incompatible. + +## Verify that Data Validation task settings and Data Masking Digit mask are not enabled simultaneously + +**API key** : `all-to-all-validation-with-digit-mask` + +This premigration assessment verifies that Data Validation setting and Data Masking Digit mask are not simultaneously enabled, as these features are incompatible. + +## Verify that target tables have the correct index configuration (Primary Key or Unique Index, not both) for Batch Apply compatibility + +**API key** : `db2-check-batch-apply-target-pk-ui-absence` + +Batch Apply requires the target tables to have either Primary or Unique keys, but not both. If a table contains both Primary and Unique Key, the apply mode changes from batch to transactional. + +## Validate that only ‘Limited LOB mode’ is used when `BatchApplyEnabled` is set to true + +**API key** : `db2-check-for-batch-apply-lob-mode` + +This premigration assessment validates whether DMS task includes LOB columns. If LOB columns are included in the scope of the task, you must use ‘Limited LOB mode’ in order to be able to use `BatchApplyEnabled=true`. + +## Validate if secondary indexes are disabled on the target database during full-load + +**API key** : `db2-check-secondary-indexes` + +This premigration assessment validates whether secondary indexes are disabled during a full-load on the target database. You must disable or remove the secondary indexes during full-load. +