AWS AmazonRDS medium security documentation change
Summary
Added new SQS-related error codes SP-1008/SP-1009 and HA solution version error
Security assessment
Documents specific security-related error conditions around missing SQS permissions and queue deletion. SP-1008 explicitly warns about missing SQS API permissions that could lead to service disruption or privilege escalation if misconfigured. Provides remediation steps for security-sensitive configuration issues.
Diff
diff --git a/AmazonRDS/latest/UserGuide/custom-troubleshooting.md b/AmazonRDS/latest/UserGuide/custom-troubleshooting.md index 6a0259060..7a91bf26a 100644 --- a//AmazonRDS/latest/UserGuide/custom-troubleshooting.md +++ b//AmazonRDS/latest/UserGuide/custom-troubleshooting.md @@ -113 +113 @@ This section explains how to fix unsupported configurations in RDS Custom for Or -The following table includes descriptions of the notifications and events that the support perimeter sends and how to fix them. These notifications and the support perimeter are subject to change. For background on the support perimeter, see [RDS Custom support perimeter](./custom-concept.html#custom-troubleshooting.support-perimeter). For event descriptions, see [Amazon RDS event categories and event messages](./USER_Events.Messages.html). +The following tables includes descriptions of the notifications and events that the support perimeter sends and how to fix them. These notifications and the support perimeter are subject to change. For background on the support perimeter, see [RDS Custom support perimeter](./custom-concept.html#custom-troubleshooting.support-perimeter). For event descriptions, see [Amazon RDS event categories and event messages](./USER_Events.Messages.html). @@ -118,0 +120,3 @@ Event ID | Configuration | RDS event message | Action + +Event ID | Configuration | RDS event message | Action +---|---|---|--- @@ -201,0 +206,10 @@ Use the following CLI command to compare the volume type of the EBS volume detai +**`SP-1008`** | Amazon SQS permission | **`Permissions are missing for Amazon SQS. Check the permissions for the IAM instance profile, VPC endpoint policy, and dependent service connections, and then try again.`** | You can resolve this by making sure the IAM profile associated with the host has the following permissions: + + + "SQS:SendMessage" + "SQS:ReceiveMessage" + "SQS:DeleteMessage" + "SQS:GetQueueUrl" + +**`SP-1009`** | Amazon Simple Queue Service (Amazon SQS) | **`The SQS queue [%s] was deleted and couldn't be recovered. To resolve this issue, recreate the queue.`** | Recreate the Amazon SQS queue. + @@ -202,0 +217,3 @@ Use the following CLI command to compare the volume type of the EBS volume detai + +Event ID | Configuration | RDS event message | Action +---|---|---|--- @@ -247,0 +265,2 @@ After the support perimeter determines that the `sudo` configurations are suppor +**`SP-2007`** | High Availability Software Solution Version | **`The HA solution of your instance differs from the expected version. To resolve this issue, create an AWS Support case.`** | Create an AWS Support case. + @@ -248,0 +268,3 @@ After the support perimeter determines that the `sudo` configurations are suppor + +Event ID | Configuration | RDS event message | Action +---|---|---|---