AWS dms documentation change
Summary
Added validation check for MySQL binlog format being set to ROW to support Change Data Capture (CDC)
Security assessment
The change adds documentation about required binlog configuration for CDC functionality. While proper binlog configuration is critical for data integrity during replication, there is no evidence this addresses an active security vulnerability. It improves operational correctness rather than patching a security flaw.
Diff
diff --git a/dms/latest/userguide/CHAP_Tasks.AssessmentReport.MySQL.md b/dms/latest/userguide/CHAP_Tasks.AssessmentReport.MySQL.md index 133b83fdc..4613b7649 100644 --- a//dms/latest/userguide/CHAP_Tasks.AssessmentReport.MySQL.md +++ b//dms/latest/userguide/CHAP_Tasks.AssessmentReport.MySQL.md @@ -5 +5 @@ -Validate if Binary Log transaction compression is disabledValidate if DMS user has REPLICATION CLIENT and REPLICATION SLAVE permissions for the source databaseValidate if DMS user has SELECT permissions for the source database tablesValidate if the server_id is set to 1 or greater in the source databaseValidate if DMS user has necessary permissions for the MySQL database as a targetValidate if automatic removal of binary logs is set for the source databaseValidate that limited LOB mode only is used when BatchApplyEnabled is set to trueValidate if a table uses a storage engine other than InnodbValidate if auto-increment is enabled on any tables used for migrationValidate if the database binlog image is set to FULL to support DMS CDCValidate if the source database is a MySQL Read-ReplicaValidate if a table has partitions, and recommend target_table_prep_mode for full-load task settingsValidate if DMS supports the database versionValidate if the target database is configured to set local_infile to 1Validate if target database has tables with foreign keysValidate if source tables in the task scope have cascade constraintsValidate if the timeout values are appropriate for a MySQL source or targetValidate max_statement_time database parameterValidate if Primary Key or Unique Index exist on target for Batch ApplyValidate if both Primary Key and Unique index exist on target for Batch ApplyValidate if secondary indexes are enabled during full load on the target databaseValidate if table has primary key or unique index when DMS validation is enabledRecommendation on using MaxFullLoadSubTasks settingCheck Transformation Rule for Digits RandomizeCheck Transformation Rule for Digits maskCheck Transformation Rule for Hashing maskVerify that Data Validation task settings and Data Masking Digit randomization are not enabled simultaneouslyVerify that Data Validation task settings and Data Masking Hashing mask are not enabled simultaneouslyVerify that Data Validation task settings and Data Masking Digit mask are not enabled simultaneouslyCheck if source Amazon Aurora MySQL instance is not a read replicaCheck if binary log retention time is set properlyCheck if source tables do not have invisible columns. +Validate if Binary Log transaction compression is disabledValidate if DMS user has REPLICATION CLIENT and REPLICATION SLAVE permissions for the source databaseValidate if DMS user has SELECT permissions for the source database tablesValidate if the server_id is set to 1 or greater in the source databaseValidate if DMS user has necessary permissions for the MySQL database as a targetValidate if automatic removal of binary logs is set for the source databaseValidate that limited LOB mode only is used when BatchApplyEnabled is set to trueValidate if a table uses a storage engine other than InnodbValidate if auto-increment is enabled on any tables used for migrationValidate if the database binlog image is set to FULL to support DMS CDCValidate if the source database is a MySQL Read-ReplicaValidate if a table has partitions, and recommend target_table_prep_mode for full-load task settingsValidate if DMS supports the database versionValidate if the target database is configured to set local_infile to 1Validate if target database has tables with foreign keysValidate if source tables in the task scope have cascade constraintsValidate if the timeout values are appropriate for a MySQL source or targetValidate max_statement_time database parameterValidate if Primary Key or Unique Index exist on target for Batch ApplyValidate if both Primary Key and Unique index exist on target for Batch ApplyValidate if secondary indexes are enabled during full load on the target databaseValidate if table has primary key or unique index when DMS validation is enabledRecommendation on using MaxFullLoadSubTasks settingCheck Transformation Rule for Digits RandomizeCheck Transformation Rule for Digits maskCheck Transformation Rule for Hashing maskVerify that Data Validation task settings and Data Masking Digit randomization are not enabled simultaneouslyVerify that Data Validation task settings and Data Masking Hashing mask are not enabled simultaneouslyVerify that Data Validation task settings and Data Masking Digit mask are not enabled simultaneouslyCheck if source Amazon Aurora MySQL instance is not a read replicaCheck if binary log retention time is set properlyCheck if source tables do not have invisible columns.Validate if the database binlog format is set to ROW to support DMS CDC @@ -76,0 +77,2 @@ This section describes individual premigration assessments for migration tasks t + * Validate if the database binlog format is set to ROW to support DMS CDC + @@ -342,0 +345,15 @@ This premigration assessment validates whether source tables do not have invisib +## Validate if the database binlog format is set to ROW to support DMS CDC + +**API key** : `mysql-check-binlog-format` + +This premigration assessment validates whether the source database binlog format is configured to ROW to support Change Data Capture (CDC). To set the binlog format to ROW, do the following: + + * For Amazon RDS, use the database's parameter group. For information, see [Configuring MySQL binary logging for Single-AZ databases](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_LogAccess.MySQL.BinaryFormat.html) in the Amazon Relational Database Service User Guide. + + * For databases hosed on-premises or on Amazon EC2, set the `binlog_format` value in `my.ini` (Microsoft Windows) or `my.cnf `(UNIX). + + + + +This assessment is only valid for a full-load and CDC migration, or a CDC-only migration. This assessment is not valid for a full-load only migration. For more information about self-hosted MySQL servers, see [Using a self-managed MySQL-compatible database as a source for AWS DMS](https://docs.aws.amazon.com/dms/latest/userguide/CHAP_Source.MySQL.html#CHAP_Source.MySQL.CustomerManaged). +