AWS AWSCloudFormation documentation change
Summary
Added detailed CloudFormation examples for deploying RDS Custom for Oracle in single/multi-AZ configurations, including prerequisites template and security configurations. Updated Multi-AZ deployment documentation.
Security assessment
The changes add security-related documentation including security group configurations (RDSSG allowing VPC traffic, VPCESG restricting to HTTPS), KMS encryption usage, IAM roles with least-privilege policies, and Secrets Manager integration. However, there's no evidence of addressing a specific security vulnerability - these are standard security best practices for RDS Custom deployments.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-resource-rds-dbinstance.md b/AWSCloudFormation/latest/TemplateReference/aws-resource-rds-dbinstance.md index 2f736abcf..63c3ea8a8 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-resource-rds-dbinstance.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-resource-rds-dbinstance.md @@ -1603,8 +1603 @@ Specifies whether the DB instance is a Multi-AZ deployment. You can't set the `A -This setting doesn't apply to the following DB instances: - - * Amazon Aurora (DB instance Availability Zones (AZs) are managed by the DB cluster.) - - * RDS Custom - - - +This setting doesn't apply to Amazon Aurora because the DB instance Availability Zones (AZs) are managed by the DB cluster. @@ -2269,0 +2263,2 @@ with _either_ the `RestoreTime` property or the `UseLatestRestorableTime` proper + * Deploying RDS Custom for Oracle with single and multiple Availability Zones + @@ -2743,0 +2739,2290 @@ This example creates an Amazon RDS Custom DB instance. Amazon RDS Custom allows +### Deploying RDS Custom for Oracle with single and multiple Availability Zones + +These examples deploy RDS Custom for Oracle with single and multi-AZ support. The prerequisites template creates the required infrastructure, and the second template creates Custom Engine Versions (CEVs) as well as both single-AZ and multi-AZ RDS Custom for Oracle instances. For more information, see [Deploying RDS Custom for Oracle with CloudFormation](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/custom-oracle-multiaz-deployment.html) in the _Amazon RDS User Guide_. + +#### JSON + + + { + "AWSTemplateFormatVersion": "2010-09-09", + "Description": "CloudFormation Template for the Pre-reqs of RDS Custom for Oracle", + + "Resources": { + "RDSVPC": { + "Type": "AWS::EC2::VPC", + "Properties": { + "EnableDnsSupport": "true", + "EnableDnsHostnames": "true", + "CidrBlock": "10.20.0.0/16", + "Tags": [ + { + "Key": "Name", + "Value": { + "Fn::Join": [ + "-", + [ + { + "Ref": "AWS::StackName" + }, + "RDSVPC" + ] + ] + } + } + ] + } + }, + "Subnet1": { + "Type": "AWS::EC2::Subnet", + "Properties": { + "VpcId": { + "Ref": "RDSVPC" + }, + "CidrBlock": "10.20.1.0/24", + "AvailabilityZone": { + "Fn::Select": [ + 0, + { + "Fn::GetAZs": "" + } + ] + }, + "Tags": [ + { + "Key": "Name", + "Value": { + "Fn::Join": [ + "-", + [ + { + "Ref": "AWS::StackName" + }, + "Subnet1" + ] + ] + } + } + ] + } + }, + "Subnet2": { + "Type": "AWS::EC2::Subnet", + "Properties": { + "VpcId": { + "Ref": "RDSVPC" + }, + "CidrBlock": "10.20.2.0/24", + "AvailabilityZone": { + "Fn::Select": [ + 1, + { + "Fn::GetAZs": "" + } + ] + }, + "Tags": [ + { + "Key": "Name", + "Value": { + "Fn::Join": [ + "-", + [ + { + "Ref": "AWS::StackName" + }, + "Subnet2" + ] + ] + } + } + ] + } + }, + "Subnet3": { + "Type": "AWS::EC2::Subnet", + "Properties": { + "VpcId": { + "Ref": "RDSVPC" + }, + "CidrBlock": "10.20.3.0/24", + "AvailabilityZone": { + "Fn::Select": [ + 2, + { + "Fn::GetAZs": "" + } + ] + }, + "Tags": [ + { + "Key": "Name", + "Value": { + "Fn::Join": [ + "-", + [ + { + "Ref": "AWS::StackName" + }, + "Subnet3" + ] + ] + } + } + ] + } + }, + "Subnet4": { + "Type": "AWS::EC2::Subnet", + "Properties": { + "VpcId": { + "Ref": "RDSVPC" + }, + "CidrBlock": "10.20.4.0/24", + "AvailabilityZone": { + "Fn::Select": [ + 2, + { + "Fn::GetAZs": "" + } + ] + }, + "Tags": [ + { + "Key": "Name", + "Value": { + "Fn::Join": [ + "-", + [ + { + "Ref": "AWS::StackName" + }, + "Subnet4" + ] + ] + } + } + ] + } + }, + "InternetGateway": { + "Type": "AWS::EC2::InternetGateway", + "Properties": { + "Tags": [ + { + "Key": "Name", + "Value": { + "Fn::Join": [ + "-", + [ + { + "Ref": "AWS::StackName" + }, + "InternetGateway"