AWS AmazonRDS documentation change

Service: AmazonRDS · 2025-05-16 · Documentation low

File: AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.MasterAccounts.md

Summary

Updated master user privileges to include SHOW_ROUTINE (3.04+) and FLUSH_* privileges (3.09+)

Security assessment

The change documents expanded privileges for the master user role, including FLUSH commands. While these privileges could impact security configurations, there is no evidence of a resolved vulnerability. It updates security-related role documentation.

Diff

diff --git a/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.MasterAccounts.md b/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.MasterAccounts.md
index bc068821e..49cb120bf 100644
--- a//AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.MasterAccounts.md
+++ b//AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.MasterAccounts.md
@@ -22 +22 @@ Aurora MySQL |  Version 2: `ALTER`, `ALTER ROUTINE`, `CREATE`, `CREATE ROUTINE`,
-Version 3: `ALTER`, `APPLICATION_PASSWORD_ADMIN`, `ALTER ROUTINE`, `CONNECTION_ADMIN`, `CREATE`, `CREATE ROLE`, `CREATE ROUTINE`, `CREATE TEMPORARY TABLES`, `CREATE USER`, `CREATE VIEW`, `DELETE`, `DROP`, `DROP ROLE`, `EVENT`, `EXECUTE`, `INDEX`, `INSERT`, `LOCK TABLES`, `PROCESS`, `REFERENCES`, `RELOAD`, `REPLICATION CLIENT`, `REPLICATION SLAVE`, `ROLE_ADMIN`, `SET_USER_ID`, `SELECT`, `SHOW DATABASES`, `SHOW_ROUTINE` (Aurora MySQL version 3.04 and higher), `SHOW VIEW`, `TRIGGER`, `UPDATE`, `XA_RECOVER_ADMIN` |  `rds_superuser_role` For more information about rds_superuser_role, see [Role-based privilege model](./AuroraMySQL.Compare-80-v3.html#AuroraMySQL.privilege-model).  
+Version 3: `ALTER`,`APPLICATION_PASSWORD_ADMIN`, `ALTER ROUTINE`,`CONNECTION_ADMIN`, `CREATE`,`CREATE ROLE`,`CREATE ROUTINE`,`CREATE TEMPORARY TABLES`, `CREATE USER`,`CREATE VIEW`, `DELETE`,`DROP`,`DROP ROLE`, `EVENT`,`EXECUTE`,`INDEX`, `INSERT`,`LOCK TABLES`, `PROCESS`,`REFERENCES`, `RELOAD`,`REPLICATION CLIENT`, `REPLICATION SLAVE`,`ROLE_ADMIN`, `SET_USER_ID`,`SELECT`,`SHOW DATABASES`,`SHOW VIEW`,`TRIGGER`, `UPDATE`,`XA_RECOVER_ADMIN` Starting with Aurora MySQL version 3.04.0, the master user also gets the `SHOW_ROUTINE` privilege. Starting with Aurora MySQL version 3.09.0, the master user also gets the `FLUSH_OPTIMIZER_COSTS`,`FLUSH_STATUS`,`FLUSH_TABLES`, and `FLUSH_USER_RESOURCES` privileges. |  `rds_superuser_role` For more information about rds_superuser_role, see [Role-based privilege model](./AuroraMySQL.Compare-80-v3.html#AuroraMySQL.privilege-model) .