AWS AmazonRDS documentation change
Summary
Added new FLUSH_* privileges to the rds_superuser_role for Aurora MySQL 3.09+
Security assessment
The change documents new database privileges (FLUSH_OPTIMIZER_COSTS, FLUSH_STATUS, etc.) granted to a role. While FLUSH commands can impact security configurations, there is no evidence this addresses a specific vulnerability. It updates security-related documentation for role permissions.
Diff
diff --git a/AmazonRDS/latest/AuroraUserGuide/AuroraMySQL.Compare-80-v3.md b/AmazonRDS/latest/AuroraUserGuide/AuroraMySQL.Compare-80-v3.md index 45694db1f..fbf23f2b5 100644 --- a//AmazonRDS/latest/AuroraUserGuide/AuroraMySQL.Compare-80-v3.md +++ b//AmazonRDS/latest/AuroraUserGuide/AuroraMySQL.Compare-80-v3.md @@ -105,0 +106,8 @@ Aurora MySQL version 3 includes a special role that has all of the following pri + * `FLUSH_OPTIMIZER_COSTS` (Aurora MySQL version 3.09 and higher) + + * `FLUSH_STATUS` (Aurora MySQL version 3.09 and higher) + + * `FLUSH_TABLES` (Aurora MySQL version 3.09 and higher) + + * `FLUSH_USER_RESOURCES` (Aurora MySQL version 3.09 and higher) +