AWS Security ChangesHomeSearch

AWS AmazonRDS documentation change

Service: AmazonRDS · 2025-06-10 · Documentation low

File: AmazonRDS/latest/UserGuide/custom-upgrading-sqlserver.md

Summary

Restructured upgrade documentation with expanded details about major/minor version upgrades, added Multi-AZ rolling upgrade process, CEV/RPEV requirements, CLI examples, and engine version compatibility tables

Security assessment

The changes explicitly mention that minor version upgrades include security patches and emphasize using up-to-date RPEV versions with OS/SQL Server patches. However, there is no specific reference to addressing a particular vulnerability or security incident.

Diff

diff --git a/AmazonRDS/latest/UserGuide/custom-upgrading-sqlserver.md b/AmazonRDS/latest/UserGuide/custom-upgrading-sqlserver.md
index b7719761a..a6e66cc9c 100644
--- a//AmazonRDS/latest/UserGuide/custom-upgrading-sqlserver.md
+++ b//AmazonRDS/latest/UserGuide/custom-upgrading-sqlserver.md
@@ -5 +5 @@
-Major version upgradesDatabase compatibility level
+OverviewUpgrading engine versionDatabase compatibility level
@@ -7 +7 @@ Major version upgradesDatabase compatibility level
-# Upgrading a DB instance for Amazon RDS Custom for SQL Server
+# Upgrading an Amazon RDS Custom for SQL Server DB instance
@@ -9 +9 @@ Major version upgradesDatabase compatibility level
-You can upgrade an Amazon RDS Custom for SQL Server DB instance by modifying it to use a new DB engine version, the same as you do for Amazon RDS.
+You can upgrade an Amazon RDS Custom for SQL Server DB instance by modifying it to use a new DB engine version. For general information about upgrading DB instances, see [Upgrading a DB instance engine version](./USER_UpgradeDBInstance.Upgrading.html).
@@ -11 +11 @@ You can upgrade an Amazon RDS Custom for SQL Server DB instance by modifying it
-The same limitations for upgrading an RDS Custom for SQL Server DB instance apply as for modifying an RDS Custom for SQL Server DB instance in general. For more information, see [Modifying an RDS Custom for SQL Server DB instance](./custom-managing.modify-sqlserver.html).
+###### Topics
@@ -13 +13 @@ The same limitations for upgrading an RDS Custom for SQL Server DB instance appl
-For general information about upgrading DB instances, see [Upgrading a DB instance engine version](./USER_UpgradeDBInstance.Upgrading.html).
+  * Overview of upgrades in RDS Custom for SQL Server
@@ -15 +15 @@ For general information about upgrading DB instances, see [Upgrading a DB instan
-If you upgrade an RDS Custom for SQL Server DB instance in a Multi-AZ deployment, then Amazon RDS performs rolling upgrades, so you have an outage only for the duration of a failover. For more information, see [Multi-AZ and in-memory optimization considerations](./USER_UpgradeDBInstance.SQLServer.Considerations.html#USER_UpgradeDBInstance.SQLServer.MAZ).
+  * Upgrading major and minor engine version
@@ -17 +17 @@ If you upgrade an RDS Custom for SQL Server DB instance in a Multi-AZ deployment
-## Major version upgrades
+  * Database compatibility level
@@ -19 +18,0 @@ If you upgrade an RDS Custom for SQL Server DB instance in a Multi-AZ deployment
-Amazon RDS Custom for SQL Server currently supports the following major version upgrades.
@@ -21,3 +19,0 @@ Amazon RDS Custom for SQL Server currently supports the following major version
-Current version | Supported upgrade versions  
----|---  
-SQL Server 2019 |  SQL Server 2022  
@@ -25 +21,39 @@ SQL Server 2019 |  SQL Server 2022
-You can use an AWS CLI query, such as the following example, to find the available upgrades for a particular database engine version.
+
+## Overview of upgrades in RDS Custom for SQL Server
+
+Amazon RDS Custom for SQL Server supports major and minor version upgrades. Minor version upgrades can include security patches, bug fixes, and engine improvements. Microsoft releases these updates as cumulative updates (CUs). Major version upgrades introduce new features and engine changes between versions, like upgrading from SQL Server 2019 to 2022. You can apply both upgrades immediately or during scheduled maintenance windows. To prevent potential backward compatibility issues, we recommend testing your applications in a non-production environment before upgrading. 
+
+RDS Custom for SQL Server allows you to upgrade an RDS Provided Engine Version (RPEV) or a Custom Engine Version (CEV).
+
+  * RDS-provided engine versions (RPEV) contain up-to-date operating system (OS) patches and SQL Server cumulative updates (CU).
+
+  * For a custom engine version (CEV), you must follow a two-step process. First, create a new CEV with your target SQL Server version, see [Preparing to create a CEV for RDS Custom for SQL Server](./custom-cev-sqlserver.preparing.html). This target version must be equal to or newer than your current version. Once the new CEV is created, modify your database instance to use this new version. For more information, see [ Performing a minor version upgrade for Amazon RDS Custom for SQL Server CEV with Multi-AZ](https://aws.amazon.com/blogs/database/performing-a-minor-version-upgrade-for-amazon-rds-custom-for-sql-server-cev-with-multi-az/).
+
+
+
+
+If you upgrade an RDS Custom for SQL Server DB instance in a Multi-AZ deployment, RDS Custom for SQL Server performs rolling upgrades for your instance. This approach minimizes downtime by upgrading one instance at a time. RDS performs the following actions to perform rolling upgrades:
+
+  1. Upgrade the standby DB instance.
+
+  2. Failover to the upgraded standby DB instance, making it the new primary DB instance.
+
+  3. Upgrade the new standby DB instance.
+
+
+
+
+The DB instance downtime for Multi-AZ deployments is the time it takes for the failover.
+
+The following limitations apply when upgrading an RDS Custom for SQL Server DB instance:
+
+  * Custom DB option and parameter groups aren't supported.
+
+  * Any additional storage volumes that you attach to your RDS Custom for SQL Server DB instance are not attached after the upgrade.
+
+
+
+
+## Upgrading major and minor engine version
+
+Both major and minor engine version upgrades are irreversible and must always be done to a newer version. To identify available target versions, use the AWS Management Console and choose from the available versions when modifying your DB instance. Alternatively, use the [`describe-db-engine-versions`](https://docs.aws.amazon.com/cli/latest/reference/rds/describe-db-engine-versions.html) CLI command or [DescribeDBEngineVersions](https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeDBEngineVersions.html) RDS API command.
@@ -44,0 +80,42 @@ For Windows:
+The output shows the available target engine versions:
+    
+    
+    --------------------------
+    |DescribeDBEngineVersions|
+    +------------------------+
+    |      EngineVersion     |
+    +------------------------+
+    |  15.00.4410.1.v1       |
+    |  15.00.4415.2.v1       |
+    |  15.00.4430.1.v1       |
+    |  16.00.4165.4.v1       |
+    |  16.00.4175.1.v1       |
+    |  16.00.4185.3.v1       |
+    +------------------------+
+
+After identifying your target version, use the AWS Management Console and follow the instructions in [Modifying an RDS Custom for SQL Server DB instance](./custom-managing.modify-sqlserver.html). Alternatively, use [`modify-db-instance`](https://docs.aws.amazon.com/cli/latest/reference/rds/modify-db-instance.html) CLI command or [ModifyDBInstance](https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_ModifyDBInstance.html) RDS API command.
+
+For Linux, macOS, or Unix:
+    
+    
+    aws rds modify-db-instance \
+        --db-instance-identifier DB_INSTANCE_IDENTIFIER \
+        --engine-version ENGINE_VERSION \
+        --allow-major-version-upgrade \
+        --region Region \
+        --no-apply-immediately 
+
+For Windows:
+    
+    
+    aws rds modify-db-instance ^
+        --db-instance-identifier DB_INSTANCE_IDENTIFIER ^
+        --engine-version ENGINE_VERSION ^
+        --allow-major-version-upgrade ^
+        --region Region ^
+        --no-apply-immediately    
+
+###### Note
+
+You must include the `--allow-major-version-upgrade` parameter to perform major version upgrades.
+