AWS Security ChangesHomeSearch

AWS prescriptive-guidance documentation change

Service: prescriptive-guidance · 2025-04-28 · Documentation low

File: prescriptive-guidance/latest/migration-sql-server/comparison.md

Summary

Updated feature comparisons for SQL Server migration options, including version support, availability group configurations, encryption details, storage limits, and monitoring capabilities

Security assessment

The changes expand documentation about security features like TDE encryption support (now covering SQL Server 2022 Standard Edition) and clarify KMS encryption availability across all editions. However, there is no evidence of addressing specific vulnerabilities or security incidents.

Diff

diff --git a/prescriptive-guidance/latest/migration-sql-server/comparison.md b/prescriptive-guidance/latest/migration-sql-server/comparison.md
index 8253ac0aa..a16e1e463 100644
--- a//prescriptive-guidance/latest/migration-sql-server/comparison.md
+++ b//prescriptive-guidance/latest/migration-sql-server/comparison.md
@@ -26 +26 @@ Change tracking |  Yes |  Yes |  Yes |
-Columnstore indexes |  Yes (Enterprise Edition: 2014 and later)  |  Yes (Enterprise Edition: 2019) |  Yes (Enterprise Edition: 2014 and later)  |   
+Columnstore indexes |  Yes (Enterprise and Standard Editions: 2016 and later)  |  Yes (Enterprise and Standard Editions: 2019 and 2022) |  Yes (Enterprise Edition: 2014 and later; Standard Edition: 2016 SP1 and later)  | See [RDBMS scalability and performance](https://learn.microsoft.com/en-us/sql/sql-server/editions-and-components-of-sql-server-2019?view=sql-server-ver16#RDBMSSP) in the SQL Server documentation.  
@@ -32 +32 @@ DDL event notifications |  No |  Yes |  Yes | If this feature is critical to you
-Delayed transaction durability (lazy commit) |  Yes (SQL Server 2014 and later) |  Yes (SQL Server 2019) |  Yes (SQL Server 2014 and later) |   
+Delayed transaction durability (lazy commit) |  Yes (SQL Server 2016 and later) |  Yes (SQL Server 2019 and 2022) |  Yes (SQL Server 2014 and later) |   
@@ -40 +40 @@ In-memory database |  Yes (SQL Server 2014 and later) |  Yes (SQL Server 2019) |
-Linked servers |  Yes (SQL Server and Oracle targets) |  Yes |  Yes | See the [Implementing linked servers with Amazon RDS for SQL Server](https://aws.amazon.com/blogs/database/implement-linked-servers-with-amazon-rds-for-microsoft-sql-server/) blog post and [Support for linked servers with Oracle OLEDB in Amazon RDS for SQL Server](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Appendix.SQLServer.Options.LinkedServers_Oracle_OLEDB.html) in the Amazon RDS documentation.  
+Linked servers |  Yes (SQL Server, Oracle, and Teradata targets) |  Yes, with CEV |  Yes | See the [Implementing linked servers with Amazon RDS for SQL Server](https://aws.amazon.com/blogs/database/implement-linked-servers-with-amazon-rds-for-microsoft-sql-server/) blog post and [Support for linked servers with Oracle OLEDB in Amazon RDS for SQL Server](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Appendix.SQLServer.Options.LinkedServers_Oracle_OLEDB.html) in the Amazon RDS documentation. A custom engine version (CEV) is a binary volume snapshot of a database version and Amazon Machine Image (AMI).  
@@ -52 +52 @@ Resource Governor |  No |  Yes |  Yes | If this feature is critical to your work
-Safe CLR |  Yes (SQL Server 2014 and 2016) |  Yes |  Yes |   
+Safe CLR |  Yes (SQL Server 2016, 2019, and 2022) |  Yes |  Yes |   
@@ -59,0 +60 @@ SQL Server Integration Services (SSIS) |  Yes (SQL Server 2016 and later) |  Yes
+SQL Server Reporting Services (SSRS) |  Yes (SQL Server 2016 and later) |  Yes |  Yes | See [Support for SSRS in Amazon RDS for SQL Server](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Appendix.SQLServer.Options.SSRS.html) in the Amazon RDS documentation.  
@@ -63 +63,0 @@ SQL Server Profiler |  Yes (server-side and client-side traces) |  Yes |  Yes |
-SQL Server Reporting Services (SSRS) |  Yes (SQL Server 2016 and later) |  Yes |  Yes | See [Support for SSRS in Amazon RDS for SQL Server](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Appendix.SQLServer.Options.SSRS.html) in the Amazon RDS documentation.  
@@ -76 +76 @@ Development feature | Amazon RDS | Amazon RDS Custom | Amazon EC2 | Notes
-Always On availability groups |  Yes |  Yes (both synchronous and asynchronous) |  Yes | If you need a self-managed Always On availability group, we recommend that you use AWS Launch Wizard to simplify SQL Server HA deployment on an EC2 instance. See [AWS Launch Wizard for SQL Server](https://docs.aws.amazon.com/launchwizard/latest/userguide/launch-wizard-sql.html) in the AWS documentation.  
+Always On availability groups |  Yes |  Yes (only for migration purposes) |  Yes | If you need a self-managed Always On availability group, we recommend that you use AWS Launch Wizard to simplify SQL Server HA deployment on an EC2 instance. See [AWS Launch Wizard for SQL Server](https://docs.aws.amazon.com/launchwizard/latest/userguide/launch-wizard-sql.html) in the AWS documentation.  
@@ -80,3 +80,3 @@ Backing up to Amazon S3 |  Yes |  Yes |  Yes | Amazon RDS supports native backup
-Database mirroring |  Yes (Multi-AZ) |  Yes |  Yes |   
-Database replication |  No (limited push subscription) |  Yes |  Yes | If you want to replicate a single table on Amazon RDS, you can also use [AWS DMS](https://aws.amazon.com/dms/) or set up read replicas.  
-Distributed availability groups |  No |  Yes |  Yes | If this feature is critical to your workload, consider choosing Amazon RDS Custom or Amazon EC2.  
+Database mirroring |  No |  Yes |  Yes |   
+SQL Server replication |  No (limited push subscription) |  Yes |  Yes | If you want to replicate a single table on Amazon RDS, you can also use [AWS DMS](https://aws.amazon.com/dms/) or set up read replicas.  
+Distributed availability groups |  No |  Yes (migration only) |  Yes | If this feature is critical to your workload, consider choosing Amazon RDS Custom or Amazon EC2.  
@@ -83,0 +84 @@ Log shipping |  No |  Yes |  Yes | For disaster recovery purposes, you can use r
+Custom log shipping |  Yes |  Yes | Not applicable |   
@@ -85,2 +86,2 @@ Managed automated backups |  Yes |  Yes |  No (requires configuring and managing
-Multi-AZ with automated failover |  Yes |  Yes (with manual configuration of Always On availability groups) |  Yes (Enterprise Edition only, with manual configuration of Always On availability groups) | See [Multi-AZ deployments for Amazon RDS for SQL Server](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_SQLServerMultiAZ.html) in the Amazon RDS documentation.  
-Read replicas |  Yes (SQL Server 2016 and later) |  Yes (with manual configuration of Always On availability groups) |  Yes (with manual configuration of Always On availability groups) |   
+Multi-AZ with automated failover |  Yes |  Yes (storage-based replication) |  Yes (Enterprise Edition only, with manual configuration of Always On availability groups) | See [Multi-AZ deployments for Amazon RDS for SQL Server](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_SQLServerMultiAZ.html) in the Amazon RDS documentation.  
+Read replicas |  Yes (SQL Server 2016 and later) |  No |  Yes (with manual configuration of Always On availability groups) |   
@@ -94 +95 @@ Development feature | Amazon RDS | Amazon RDS Custom | Amazon EC2 | Notes
-Built-in instance and database monitoring and metrics |  Yes |  No |  No (export your own metrics to CloudWatch or use a third-party solution) | See the blog post [Monitor your SQL Server database by using custom metrics with Amazon CloudWatch and AWS Systems Manager](https://aws.amazon.com/blogs/database/monitor-your-microsoft-sql-server-using-custom-metrics-with-amazon-cloudwatch-and-aws-systems-manager/).  
+Built-in instance and database monitoring and metrics |  Yes |  No (export your own metrics to Amazon CloudWatch or use a third-party solution) |  No (export your own metrics to CloudWatch or use a third-party solution) | See the blog post [Monitor your SQL Server database by using custom metrics with Amazon CloudWatch and AWS Systems Manager](https://aws.amazon.com/blogs/database/monitor-your-microsoft-sql-server-using-custom-metrics-with-amazon-cloudwatch-and-aws-systems-manager/).  
@@ -97 +98 @@ Maximum number of databases per instance | Depends on the instance size and Mult
-Maximum storage size of a DB instance | 16 TiB | 16 TiB |  No limitation | Amazon RDS also supports tempdb databases on local disks by using Non-Volatile Memory Express (NVMe) instance storage. See [Instance store support for the tempdb database on Amazon RDS for SQL Server](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/SQLServer.InstanceStore.html) in the Amazon RDS documentation.  
+Maximum storage size of a DB instance | 64 TiB | 64 TiB |  No limitation | Amazon RDS also supports tempdb databases on local disks by using Non-Volatile Memory Express (NVMe) instance storage. See [Instance store support for the tempdb database on Amazon RDS for SQL Server](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/SQLServer.InstanceStore.html) in the Amazon RDS documentation.  
@@ -99,2 +100 @@ Minimum storage size of a DB instance | 20 GiB (Enterprise, Standard, Web, and E
-New Query Optimizer |  Yes (SQL Server 2014 and later) |  Yes (SQL Server 2014 and later) |  Yes (SQL Server 2014 and later) |   
-Read replicas |  Yes (SQL Server 2016 and later) |  Yes (with manual configuration of Always On availability groups) |  Yes (with manual configuration of Always On availability groups) |   
+New Query Optimizer |  Yes (SQL Server 2016 and later) |  Yes (SQL Server 2019 and 2022) |  Yes (SQL Server 2014 and later) |   
@@ -107,3 +107,3 @@ Development feature | Amazon RDS | Amazon RDS Custom | Amazon EC2 | Notes
-Automatic software patching |  Yes |  No |  No |   
-Encrypted storage using AWS KMS |  Yes (all SQL Server editions except Express) |  Yes |  Yes | See the blog post [Securing data in Amazon RDS using AWS KMS encryption](https://aws.amazon.com/blogs/database/securing-data-in-amazon-rds-using-aws-kms-encryption/).  
-Flexible server roles |  Yes (SQL Server 2014 and later) |  Yes (SQL Server 2019) |  Yes (SQL Server 2014 and later) |   
+Automatic software patching |  Yes |  No (CEV) Yes (RPEV) |  No | A custom engine version (CEV) is a binary volume snapshot of a database version and Amazon Machine Image (AMI). An RDS provided engine version (RPEV) is the default Amazon Machine Image (AMI) and Microsoft SQL Server installation.  
+Encrypted storage using AWS KMS |  Yes |  Yes |  Yes | See the blog post [Securing data in Amazon RDS using AWS KMS encryption](https://aws.amazon.com/blogs/database/securing-data-in-amazon-rds-using-aws-kms-encryption/).  
+Server roles |  Yes (SQL Server 2016 and later) |  Yes (SQL Server 2019 and 2022) |  Yes (SQL Server 2014 and later) |   
@@ -114 +114 @@ sysadmin role |  No |  Yes |  Yes | For unsupported server-level roles, see [Mic
-TDE (encryption at rest) |  Yes (Enterprise Edition: 2014-2019; Standard Edition: 2019) |  Yes (SQL Server 2019 Enterprise, Standard, Web, and Developer Editions) |  Yes (Enterprise Edition: 2014-2019; Standard Edition: 2019) | See information about TDE support in the [Amazon RDS](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Appendix.SQLServer.Options.TDE.html) and [Amazon RDS Custom](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/custom-reqs-limits-MS.html#custom-sqlserver-features.smk.tde) documentation.  
+TDE (encryption at rest) |  Yes (Enterprise Edition: 2016-2022; Standard Edition: 2019 and 2022) |  Yes (SQL Server 2019 and 2022 Enterprise, Standard, Web, and Developer Editions) |  Yes (Enterprise Edition: 2014-2019; Standard Edition: 2019) | See information about TDE support in the [Amazon RDS](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Appendix.SQLServer.Options.TDE.html) and [Amazon RDS Custom](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/custom-reqs-limits-MS.html#custom-sqlserver-features.smk.tde) documentation.  
@@ -123 +123 @@ Ability to install a third-party agent |  No |  Yes |  Yes |
-Ability to rename existing databases |  Yes (Single-AZ only) |  Yes (not available for databases in availability groups or enabled for mirroring) |  Yes (not available for databases in availability groups or enabled for mirroring) | For Multi-AZ deployments on Amazon RDS, see [Renaming a Microsoft SQL Server database in a Multi-AZ deployment](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Appendix.SQLServer.CommonDBATasks.RenamingDB.html) in the Amazon RDS documentation.  
+Ability to rename existing databases |  Yes (Single-AZ only) |  Yes |  Yes (not available for databases in availability groups or enabled for mirroring) | For Multi-AZ deployments on Amazon RDS, see [Renaming a Microsoft SQL Server database in a Multi-AZ deployment](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Appendix.SQLServer.CommonDBATasks.RenamingDB.html) in the Amazon RDS documentation.  
@@ -130 +130 @@ SQL Server editions | Enterprise, Standard, Web, Express | Enterprise, Standard,
-SQL Server versions | 2014, 2016, 2017, 2019, 2022 | 2019, 2022 | 2014, 2016, 2017, 2019, 2022 |   
+SQL Server versions | 2016, 2017, 2019, 2022 | 2019, 2022 | 2014, 2016, 2017, 2019, 2022 |   
@@ -138,2 +137,0 @@ For detailed information about these features, see the following:
-  * [Remote Desktop Gateway on AWS](https://aws.amazon.com/quickstart/architecture/rd-gateway/) (AWS Quick Start)
-
@@ -142,2 +139,0 @@ For detailed information about these features, see the following:
-  * [SQL Server with Always On replication on AWS](https://aws.amazon.com/quickstart/architecture/sql/) (AWS Quick Start)
-
@@ -151,4 +146,0 @@ For detailed information about these features, see the following:
-The following diagram helps visualize the information in the previous table, to assist in your decision-making process.
-
-![How to choose a hosting option \(Amazon RDS or Amazon EC2\) for your SQL Server database](/images/prescriptive-guidance/latest/migration-sql-server/images/rds-ec2-comparison.png)
-