AWS AmazonRDS documentation change
Summary
Added documentation about Secrets Manager integration for managing master user passwords in CDB configurations
Security assessment
The change introduces documentation for using AWS Secrets Manager to manage database credentials, which improves security practices but does not address a specific existing vulnerability. It enhances security posture through better credential management.
Diff
diff --git a/AmazonRDS/latest/UserGuide/Oracle.Concepts.CDBs.md b/AmazonRDS/latest/UserGuide/Oracle.Concepts.CDBs.md index e97485fc7..1eac99565 100644 --- a//AmazonRDS/latest/UserGuide/Oracle.Concepts.CDBs.md +++ b//AmazonRDS/latest/UserGuide/Oracle.Concepts.CDBs.md @@ -5 +5 @@ -Multi-tenant configuration of the CDB architectureSingle-tenant configuration of the CDB architectureCreation and conversion options for CDBsUser accounts and privilegesParameter group familiesLimitations of RDS for Oracle CDBs +Multi-tenant configurationSingle-tenant configurationCreation and conversion options for CDBsUser accounts and privilegesParameter group familiesLimitations of RDS for Oracle CDBs @@ -44 +44 @@ You can configure the following settings: - * Tenant database master password + * Tenant database master password (optionally integrated with Secrets Manager) @@ -93,0 +94,2 @@ The `rdsadmin` user is a common user account. You can run RDS for Oracle package +For master users in both the multi-tenant and single-tenant configurations, you can use credentials that are self-managed or managed by AWS Secrets Manager. In the single-tenant configuration, you use instance-level CLI commands such as `create-db-instance` for managed master passwords. In the multi-tenant configuration, you use tenant database commands such as `create-tenant-database` for managed master passwords. For more information about Secrets Manager integration, see [Managing the master user password for an RDS for Oracle tenant database with Secrets Manager](./rds-secrets-manager.html#rds-secrets-manager-tenant). +