AWS AmazonRDS documentation change
Summary
Strengthened warning about the protected rdsproxyadmin user, emphasizing that tampering can cause proxy unavailability.
Security assessment
The change highlights operational security best practices (protecting system users) but does not address a specific security vulnerability. It adds documentation to prevent accidental misconfiguration impacting availability.
Diff
diff --git a/AmazonRDS/latest/AuroraUserGuide/rds-proxy.md b/AmazonRDS/latest/AuroraUserGuide/rds-proxy.md index a52f5fadb..45476397d 100644 --- a//AmazonRDS/latest/AuroraUserGuide/rds-proxy.md +++ b//AmazonRDS/latest/AuroraUserGuide/rds-proxy.md @@ -94 +94 @@ For more information about global condition context keys, see [AWS global condit - * Your proxy automatically creates the `rdsproxyadmin` DB user when you register a proxy target. Deleting or modifying the `rdsproxyadmin` user or its permissions might impact the availability of the proxy to your application. + * Your proxy automatically creates the `rdsproxyadmin` DB user when you register a proxy target. This is a protected user that is essential for proxy functionality. You should avoid tampering with the `rdsproxyadmin` user in any capacity. Deleting or modifying the `rdsproxyadmin` user or its permissions can result in complete unavailability of the proxy to your application.