AWS Security ChangesHomeSearch

AWS AmazonRDS high security documentation change

Service: AmazonRDS · 2025-06-25 · Security-related high

File: AmazonRDS/latest/UserGuide/UsingWithRDS.IAMDBAuth.Connecting.Python.md

Summary

Added `ssl_verify_cert=True` parameter to PyMySQL connection configuration for IAM database authentication.

Security assessment

Enabling SSL certificate verification strengthens TLS connection security by validating server certificates, which helps prevent man-in-the-middle attacks. This is a direct security improvement to the connection process.

Diff

diff --git a/AmazonRDS/latest/UserGuide/UsingWithRDS.IAMDBAuth.Connecting.Python.md b/AmazonRDS/latest/UserGuide/UsingWithRDS.IAMDBAuth.Connecting.Python.md
index accd0e03c..0317ef348 100644
--- a//AmazonRDS/latest/UserGuide/UsingWithRDS.IAMDBAuth.Connecting.Python.md
+++ b//AmazonRDS/latest/UserGuide/UsingWithRDS.IAMDBAuth.Connecting.Python.md
@@ -79 +79 @@ Before running this code, install the PyMySQL driver by following the instructio
-        conn =  pymysql.connect(auth_plugin_map={'mysql_clear_password':None},host=ENDPOINT, user=USER, password=token, port=PORT, database=DBNAME, ssl_ca='SSLCERTIFICATE', ssl_verify_identity=True)
+        conn =  pymysql.connect(auth_plugin_map={'mysql_clear_password':None},host=ENDPOINT, user=USER, password=token, port=PORT, database=DBNAME, ssl_ca='SSLCERTIFICATE', ssl_verify_identity=True, ssl_verify_cert=True)