AWS AmazonRDS documentation change
Summary
Restructured HA documentation to differentiate Multi-AZ vs Oracle Data Guard, added encryption guidance
Security assessment
Added explicit mention of VPN usage for encryption in transit between HA instances. While this documents a security-related configuration, it does not address a specific security vulnerability but rather informs about security feature implementation options.
Diff
diff --git a/AmazonRDS/latest/UserGuide/custom-managing.ha.md b/AmazonRDS/latest/UserGuide/custom-managing.ha.md index 44d33722a..950f963cb 100644 --- a//AmazonRDS/latest/UserGuide/custom-managing.ha.md +++ b//AmazonRDS/latest/UserGuide/custom-managing.ha.md @@ -4,0 +5,2 @@ +Multi-AZ deploymentsOracle Data Guard + @@ -7 +9,9 @@ -To support replication between RDS Custom for Oracle DB instances, you can configure high availability (HA) with Oracle Data Guard. The primary DB instance automatically synchronizes data to the standby instances. This feature is supported only in Enterprise Edition. +RDS Custom for Oracle provides built-in high availability through Multi-AZ deployments. Alternatively, you can use Oracle Data Guard as a customer-managed option based on your use cases. + +## Multi-AZ deployments (fully-managed) + +With Multi-AZ deployments for RDS Custom for Oracle, Amazon RDS automatically provisions and maintains a synchronous standby replica in a different Availability Zone (AZ). The primary DB instance is synchronously replicated across AZs to a standby replica for data redundancy. Multi-AZ deployment is supported in both the Enterprise Edition and the Standard Edition 2. See [Managing a Multi-AZ deployment for RDS Custom for Oracle](./custom-oracle-multiaz.html) for details. + +## Oracle Data Guard (customer-managed) + +Alternatively, you can achieve high availability by manually configuring Oracle Data Guard to replicate data between RDS Custom for Oracle DB instances. The primary DB instance automatically synchronizes data to the standby instances. Oracle Data Guard is supported only in the Enterprise Edition. @@ -11 +21 @@ You can configure your high availability environment in the following ways: - * Configure standby instances in different Availability Zones (AZs) to be resilient to AZ failures. + * Configure standby instances in different AZs to be resilient to AZ failures. @@ -13 +23 @@ You can configure your high availability environment in the following ways: - * Place your standby databases in mounted or read-only mode. + * Place your standby databases in mounted or read-only mode. Read-only mode requires an Oracle Active Data Guard license. @@ -17 +27 @@ You can configure your high availability environment in the following ways: - * Migrate data by configuring high availability for your on-premises instance, and then failing over or switching over to the RDS Custom standby database. + * Migrate data by configuring high availability for your on-premises instance, and then failing over or switching over to the RDS Custom for Oracle standby database. @@ -22 +32 @@ You can configure your high availability environment in the following ways: -To learn how to configure high availability, see the whitepaper [Build high availability for Amazon RDS Custom for Oracle using read replicas](https://aws.amazon.com/blogs/database/build-high-availability-for-amazon-rds-custom-for-oracle-using-read-replicas/). You can perform the following tasks: +To learn how to configure Oracle Data Guard for high availability, see the AWS blog [Build high availability for RDS Custom for Oracle using read replicas](https://aws.amazon.com/blogs/database/build-high-availability-for-amazon-rds-custom-for-oracle-using-read-replicas/). You can perform the following tasks: @@ -24 +34 @@ To learn how to configure high availability, see the whitepaper [Build high avai - * Use a virtual private network (VPN) tunnel to encrypt data in transit for your high availability instances. Encryption in transit isn't configured automatically by RDS Custom. + * Use a virtual private network (VPN) tunnel to encrypt data in transit for your high availability instances. Encryption in transit isn't configured automatically by RDS Custom for Oracle.