AWS aurora-dsql documentation change
Summary
Clarified authentication token usage and updated psql connection instructions
Security assessment
Enhanced documentation about authentication tokens (security feature) and connection best practices, but no explicit security vulnerability is addressed.
Diff
diff --git a/aurora-dsql/latest/userguide/getting-started.md b/aurora-dsql/latest/userguide/getting-started.md index d01e4b4b8..5e2f4e0f8 100644 --- a//aurora-dsql/latest/userguide/getting-started.md +++ b//aurora-dsql/latest/userguide/getting-started.md @@ -97 +97,3 @@ You can't undo this action and you won't be able to retrieve any data. -Aurora DSQL uses the PostgreSQL protocol. Use your preferred interactive client by providing a signed IAM [ authentication token](https://docs.aws.amazon.com/aurora-dsql/latest/userguide/SECTION_authentication-token.html) as the password when connecting to your cluster. An authentication token is a unique string of characters that is generated dynamically. Authentication tokens are generated using AWS Signature Version 4. The token is only used for authentication and doesn't affect the connection after it is established. If you try to re-connect using an expired token, the connection request is denied. For more information, see [Generating an authentication token in Amazon Aurora DSQL](./SECTION_authentication-token.html). +Aurora DSQL uses the PostgreSQL protocol. Use your preferred interactive client by providing a signed IAM [ authentication token](https://docs.aws.amazon.com/aurora-dsql/latest/userguide/SECTION_authentication-token.html) as the password when connecting to your cluster. An authentication token is a unique string of characters that Aurora DSQL generates dynamically using AWS Signature Version 4. + +Aurora DSQL uses the token only for authentication. The token doesn't affect the connection after it is established. If you try to reconnect using an expired token, the connection request is denied. For more information, see [Generating an authentication token in Amazon Aurora DSQL](./SECTION_authentication-token.html). @@ -114 +116 @@ The `psql` utility is a terminal-based front-end to PostgreSQL. It enables you t -If you already have the AWS CLI installed, use the following example to connect to your cluster. You can also use AWS CloudShell which comes with `psql` preinstalled, or, you can install `psql` directly. +If you already have the AWS CLI installed, use the following example to connect to your cluster. You can either use AWS CloudShell, which comes with `psql` preinstalled, or you can install `psql` directly. @@ -127,2 +129,2 @@ If you already have the AWS CLI installed, use the following example to connect - # Connect with psql which will automatically use the values set in PGPASSWORD and PGSSLMODE. - # Quiet mode will suppress unnecessary warnings and chatty responses. Still outputs errors. + # Connect with psql, which automatically uses the values set in PGPASSWORD and PGSSLMODE. + # Quiet mode suppresses unnecessary warnings and chatty responses but still outputs errors.