AWS aurora-dsql medium security documentation change

Service: aurora-dsql · 2025-05-28 · Security-related medium

File: aurora-dsql/latest/userguide/configuring-single-region-clusters.md

Summary

Updated single-Region cluster documentation with encryption details and example identifiers

Security assessment

Added 'encryptionDetails' field showing both AWS-managed and customer-managed KMS keys in examples. This documents encryption configuration options which are security-relevant features.

Diff

diff --git a/aurora-dsql/latest/userguide/configuring-single-region-clusters.md b/aurora-dsql/latest/userguide/configuring-single-region-clusters.md
index 29a35329e..626f54cf0 100644
--- a//aurora-dsql/latest/userguide/configuring-single-region-clusters.md
+++ b//aurora-dsql/latest/userguide/configuring-single-region-clusters.md
@@ -7,2 +6,0 @@ Creating a clusterDescribing a clusterUpdating a clusterDeleting a clusterListin
-Amazon Aurora DSQL is provided as a Preview service. To learn more, see [Betas and Previews ](https://aws.amazon.com/service-terms/) in the AWS Service Terms. 
-
@@ -32,2 +30,2 @@ To disable deletion protection during creation, include the `--no-deletion-prote
-        "identifier": "foo0bar1baz2quux3quuux4",
-        "arn": "arn:aws:dsql:us-east-1:111122223333:cluster/foo0bar1baz2quux3quuux4",
+        "identifier": "abc0def1baz2quux3quuux4",
+        "arn": "arn:aws:dsql:us-east-1:111122223333:cluster/abc0def1baz2quux3quuux4",
@@ -36 +34,6 @@ To disable deletion protection during creation, include the `--no-deletion-prote
-        "deletionProtectionEnabled": true
+        "deletionProtectionEnabled": true,
+        "tag": {},
+        "encryptionDetails": {
+            "encryptionType": "AWS_OWNED_KMS_KEY",
+            "encryptionStatus": "ENABLED"
+        }
@@ -54,2 +57,2 @@ Get information about a cluster using the **get-cluster** command.
-        "identifier": "foo0bar1baz2quux3quuux4",
-        "arn": "arn:aws:dsql:us-east-1:111122223333:cluster/foo0bar1baz2quux3quuux4",
+        "identifier": "abc0def1baz2quux3quuux4",
+        "arn": "arn:aws:dsql:us-east-1:111122223333:cluster/abc0def1baz2quux3quuux4",
@@ -58 +61,6 @@ Get information about a cluster using the **get-cluster** command.
-        "deletionProtectionEnabled": false
+        "deletionProtectionEnabled": false,
+        "encryptionDetails": {
+            "encryptionType": "CUSTOMER_MANAGED_KMS_KEY",
+            "kmsKeyArn": "arn:aws:kms:us-east-1:111122223333:key/123a456b-c789-01de-2f34-g5hi6j7k8lm9",
+            "encryptionStatus": "ENABLED"
+        }
@@ -81,2 +89,2 @@ Updates are asynchronous operations. Call the **GetCluster** API until the statu
-        "identifier": "foo0bar1baz2quux3quuux4",
-        "arn": "arn:aws:dsql:us-east-1:111122223333:cluster/foo0bar1baz2quux3quuux4",
+        "identifier": "abc0def1baz2quux3quuux4",
+        "arn": "arn:aws:dsql:us-east-1:111122223333:cluster/abc0def1baz2quux3quuux4",
@@ -106,2 +114,2 @@ You can only delete clusters that have deletion protection disabled. By default,
-        "identifier": "foo0bar1baz2quux3quuux4",
-        "arn": "arn:aws:dsql:us-east-1:111122223333:cluster/foo0bar1baz2quux3quuux4",
+        "identifier": "abc0def1baz2quux3quuux4",
+        "arn": "arn:aws:dsql:us-east-1:111122223333:cluster/abc0def1baz2quux3quuux4",
@@ -127,6 +135,2 @@ List your clusters using the **list-clusters** command.
-                "identifier": "foo0bar1baz2quux3quux4quuux",
-                "arn": "arn:aws:dsql:us-east-1:111122223333:cluster/foo0bar1baz2quux3quux4quuux"
-            },
-            {
-                "identifier": "foo0bar1baz2quux3quux5quuuux",
-                "arn": "arn:aws:dsql:us-east-1:111122223333:cluster/foo0bar1baz2quux3quux5quuuux"
+                "identifier": "abc0def1baz2quux3quux4quuux",
+                "arn": "arn:aws:dsql:us-east-1:111122223333:cluster/abc0def1baz2quux3quux4quuux"
@@ -135,2 +139,2 @@ List your clusters using the **list-clusters** command.
-                "identifier": "foo0bar1baz2quux3quux5quuuuux",
-                "arn": "arn:aws:dsql:us-east-1:111122223333:cluster/foo0bar1baz2quux3quux5quuuuux"
+                "identifier": "abc0def1baz2quux3quux5quuuux",
+                "arn": "arn:aws:dsql:us-east-1:111122223333:cluster/abc0def1baz2quux3quux5quuuux"
@@ -147 +151 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please
-Setting up Aurora DSQL clusters
+Managing Aurora DSQL clusters