AWS Security ChangesHomeSearch

AWS AmazonRDS documentation change

Service: AmazonRDS · 2025-05-25 · Documentation low

File: AmazonRDS/latest/UserGuide/rds-proxy.monitoring.md

Summary

Changed recommended CloudWatch statistic from Sum to Average for multiple connection metrics

Security assessment

The change modifies statistical aggregation recommendations for monitoring metrics but doesn't address security vulnerabilities or weaknesses. While TLS-related metrics are mentioned, the change only affects how they're measured, not their security properties.

Diff

diff --git a/AmazonRDS/latest/UserGuide/rds-proxy.monitoring.md b/AmazonRDS/latest/UserGuide/rds-proxy.monitoring.md
index caef3621e..a06d56520 100644
--- a//AmazonRDS/latest/UserGuide/rds-proxy.monitoring.md
+++ b//AmazonRDS/latest/UserGuide/rds-proxy.monitoring.md
@@ -37 +37 @@ Metric  |  Description  |  Valid period  |  CloudWatch dimension set
-`ClientConnections` |  The current number of client connections. This metric is reported every minute. The most useful statistic for this metric is `Sum`.  |  1 minute  |  Dimension set 1, Dimension set 2  
+`ClientConnections` |  The current number of client connections. This metric is reported every minute. The most useful statistic for this metric is `Average`.  |  1 minute  |  Dimension set 1, Dimension set 2  
@@ -39 +39 @@ Metric  |  Description  |  Valid period  |  CloudWatch dimension set
-`ClientConnectionsNoTLS` |  The current number of client connections without Transport Layer Security (TLS). This metric is reported every minute. The most useful statistic for this metric is `Sum`.  |  1 minute and above  |  Dimension set 1, Dimension set 2  
+`ClientConnectionsNoTLS` |  The current number of client connections without Transport Layer Security (TLS). This metric is reported every minute. The most useful statistic for this metric is `Average`.  |  1 minute and above  |  Dimension set 1, Dimension set 2  
@@ -43 +43 @@ Metric  |  Description  |  Valid period  |  CloudWatch dimension set
-`ClientConnectionsTLS` |  The current number of client connections with TLS. This metric is reported every minute. The most useful statistic for this metric is `Sum`.  |  1 minute and above  |  Dimension set 1, Dimension set 2  
+`ClientConnectionsTLS` |  The current number of client connections with TLS. This metric is reported every minute. The most useful statistic for this metric is `Average`.  |  1 minute and above  |  Dimension set 1, Dimension set 2  
@@ -46 +46 @@ Metric  |  Description  |  Valid period  |  CloudWatch dimension set
-`DatabaseConnections` |  The current number of database connections. This metric is reported every minute. The most useful statistic for this metric is `Sum`.  |  1 minute  |  Dimension set 1, Dimension set 3, Dimension set 4  
+`DatabaseConnections` |  The current number of database connections. This metric is reported every minute. The most useful statistic for this metric is `Average`.  |  1 minute  |  Dimension set 1, Dimension set 3, Dimension set 4  
@@ -48,3 +48,3 @@ Metric  |  Description  |  Valid period  |  CloudWatch dimension set
-`DatabaseConnectionsCurrentlyBorrowed` |  The current number of database connections in the borrow state. This metric is reported every minute. The most useful statistic for this metric is `Sum`.  |  1 minute  |  Dimension set 1, Dimension set 3, Dimension set 4  
-`DatabaseConnectionsCurrentlyInTransaction` |  The current number of database connections in a transaction. This metric is reported every minute. The most useful statistic for this metric is `Sum`.  |  1 minute  |  Dimension set 1, Dimension set 3, Dimension set 4  
-`DatabaseConnectionsCurrentlySessionPinned` |  The current number of database connections currently pinned because of operations in client requests that change session state. This metric is reported every minute. The most useful statistic for this metric is `Sum`.  |  1 minute  |  Dimension set 1, Dimension set 3, Dimension set 4  
+`DatabaseConnectionsCurrentlyBorrowed` |  The current number of database connections in the borrow state. This metric is reported every minute. The most useful statistic for this metric is `Average`.  |  1 minute  |  Dimension set 1, Dimension set 3, Dimension set 4  
+`DatabaseConnectionsCurrentlyInTransaction` |  The current number of database connections in a transaction. This metric is reported every minute. The most useful statistic for this metric is `Average`.  |  1 minute  |  Dimension set 1, Dimension set 3, Dimension set 4  
+`DatabaseConnectionsCurrentlySessionPinned` |  The current number of database connections currently pinned because of operations in client requests that change session state. This metric is reported every minute. The most useful statistic for this metric is `Average`.  |  1 minute  |  Dimension set 1, Dimension set 3, Dimension set 4  
@@ -53,2 +53,2 @@ Metric  |  Description  |  Valid period  |  CloudWatch dimension set
-`DatabaseConnectionsWithTLS` |  The current number of database connections with TLS. This metric is reported every minute. The most useful statistic for this metric is `Sum`.  |  1 minute  |  Dimension set 1, Dimension set 3, Dimension set 4  
-`MaxDatabaseConnectionsAllowed` |  The maximum number of database connections allowed. This metric is reported every minute. The most useful statistic for this metric is `Sum`.  |  1 minute  |  Dimension set 1, Dimension set 3, Dimension set 4  
+`DatabaseConnectionsWithTLS` |  The current number of database connections with TLS. This metric is reported every minute. The most useful statistic for this metric is `Average`.  |  1 minute  |  Dimension set 1, Dimension set 3, Dimension set 4  
+`MaxDatabaseConnectionsAllowed` |  The maximum number of database connections allowed. This metric is reported every minute. The most useful statistic for this metric is `Average`.  |  1 minute  |  Dimension set 1, Dimension set 3, Dimension set 4