AWS documentdb documentation change
Summary
Updated security section to clarify IAM authentication limitations and added unsupported IAM authentication feature
Security assessment
The changes explicitly document that IAM authentication login for elastic clusters is unsupported, which clarifies security controls but does not indicate a resolved vulnerability. This adds security-relevant documentation about authentication limitations.
Diff
diff --git a/documentdb/latest/developerguide/docdb-using-elastic-clusters.md b/documentdb/latest/developerguide/docdb-using-elastic-clusters.md index a65b22d92..f5980f337 100644 --- a//documentdb/latest/developerguide/docdb-using-elastic-clusters.md +++ b//documentdb/latest/developerguide/docdb-using-elastic-clusters.md @@ -67 +67 @@ Amazon DocumentDB elastic clusters integrate with other AWS services in the same - * **Migration** \- You can use AWS Database Migration Service (DMS) to migrate from MongoDB and other relational databases to Amazon DocumentDB elastic clusters. + * **Migration** — You can use AWS Database Migration Service (DMS) to migrate from MongoDB and other relational databases to Amazon DocumentDB elastic clusters. @@ -69 +69 @@ Amazon DocumentDB elastic clusters integrate with other AWS services in the same - * **Monitoring** \- You can monitor the health and performance of your elastic cluster using Amazon CloudWatch. + * **Monitoring** — You can monitor the health and performance of your elastic cluster using Amazon CloudWatch. @@ -71 +71 @@ Amazon DocumentDB elastic clusters integrate with other AWS services in the same - * **Security** \- You can set up authentication and authorization through AWS Identity and Access Management (IAM) to manage your elastic clusters and use Amazon VPC for secure VPC-only connections. + * **Security** — You can set up authentication and authorization through AWS Identity and Access Management (IAM) to manage your elastic cluster resources such as creating and updating an elastic cluster, and use Amazon VPC for secure VPC-only connections. IAM authentication login for elastic clusters is not supported. @@ -73 +73 @@ Amazon DocumentDB elastic clusters integrate with other AWS services in the same - * **Data management** \- You can use AWS Glue to import and export data from/to other AWS services such as Amazon S3, Amazon Redshift and Amazon OpenSearch Service. + * **Data management** — You can use AWS Glue to import and export data from/to other AWS services such as Amazon S3, Amazon Redshift and Amazon OpenSearch Service. @@ -111 +111,3 @@ Elastic clusters support the MongoDB 5.0-compatable wire protocol. For differenc -The following cluster management features and capabilities are not supported in this release: +The following cluster management features and capabilities are _not_ supported in this release: + + * Ability to use IAM users and roles to authenticate into the database @@ -140 +142 @@ For information about elastic cluster limits, see [Amazon DocumentDB Quotas and -The following query and write operation commands and capabilities are not supported in this release: +The following query and write operation commands and capabilities are _not_ supported in this release: @@ -157 +159 @@ The following query and write operation commands and capabilities are not suppor -The following collection and index management features are not supported in this release: +The following collection and index management features are _not_ supported in this release: @@ -174 +176 @@ The following collection and index management features are not supported in this -The following administration and diagnostic commands and capabilities are not supported in this release: +The following administration and diagnostic commands and capabilities are _not_ supported in this release: @@ -189 +191 @@ The following administration and diagnostic commands and capabilities are not su -The following Amazon DocumentDB opt-in features are not supported in this release: +The following Amazon DocumentDB opt-in features are _not_ supported in this release: