AWS Security ChangesHomeSearch

AWS aurora-dsql documentation change

Service: aurora-dsql · 2025-05-28 · Documentation medium

File: aurora-dsql/latest/userguide/disaster-recovery-resiliency.md

Summary

Updated backup/restore documentation from preview limitations to general availability, clarified witness Region storage behavior, and removed preview disclaimers

Security assessment

Added explicit documentation about encrypted transaction logs in witness Regions and operational backup capabilities. While these are security-related features, there's no evidence this change addresses a specific active vulnerability or incident.

Diff

diff --git a/aurora-dsql/latest/userguide/disaster-recovery-resiliency.md b/aurora-dsql/latest/userguide/disaster-recovery-resiliency.md
index 9a241e0a7..577a4bd89 100644
--- a//aurora-dsql/latest/userguide/disaster-recovery-resiliency.md
+++ b//aurora-dsql/latest/userguide/disaster-recovery-resiliency.md
@@ -7,2 +6,0 @@ Backup and restoreReplicationHigh availability
-Amazon Aurora DSQL is provided as a Preview service. To learn more, see [Betas and Previews ](https://aws.amazon.com/service-terms/) in the AWS Service Terms. 
-
@@ -19,3 +17 @@ In addition to the AWS global infrastructure, Aurora DSQL offers several feature
-During preview, Aurora DSQL doesn't support backup and restore.
-
-Aurora DSQL plans to support backup and restore with AWS Backup console, so you can perform a full backup and restore for your single-Region and multi-Region clusters. [ What is AWS Backup](https://docs.aws.amazon.com/aws-backup/latest/devguide/whatisbackup.html).
+Aurora DSQL supports backup and restore with AWS Backup console. You can perform a full backup and restore for your single-Region and multi-Region clusters. For more information, see [Backup and restore for Amazon Aurora DSQL](./backup-aurora-dsql.html).
@@ -25 +21,3 @@ Aurora DSQL plans to support backup and restore with AWS Backup console, so you
-By design, Aurora DSQL commits all write transactions to a distributed transaction log and synchronously replicates all committed log data to user storage replicas in three AZs. Multi-Region clusters provide full cross-Region replication capabilities between read and write Regions. A designated witness Region supports transaction log-only writes and doesn't use any storage. Witness Regions don't have an endpoint. This means that witness Regions store only encrypted transaction logs, require no administration or configuration, and aren't accessible by users.
+By design, Aurora DSQL commits all write transactions to a distributed transaction log and synchronously replicates all committed log data to user storage replicas in three AZs. Multi-Region clusters provide full cross-Region replication capabilities between read and write Regions.
+
+A designated witness Region supports transaction log-only writes and doesn't consume storage. Witness Regions don't have an endpoint. This means that witness Regions store only encrypted transaction logs, require no administration or configuration, and aren't accessible by users.
@@ -27 +25 @@ By design, Aurora DSQL commits all write transactions to a distributed transacti
-Aurora DSQL transaction logs and user storage are distributed across with all data presented to Aurora DSQL query processors as a single logical volume. Aurora DSQL automatically splits, merges, and replicates data based on database primary key range and access patterns. Aurora DSQL automatically scales read replicas, both up and down, based on read access frequency.
+Aurora DSQL transaction logs and user storage are distributed with all data presented to Aurora DSQL query processors as a single logical volume. Aurora DSQL automatically splits, merges, and replicates data based on database primary key range and access patterns. Aurora DSQL automatically scales read replicas, both up and down, based on read access frequency.