AWS odb documentation change
Summary
Removed preview release disclaimer and updated service-linked role permissions documentation with additional granular permissions (VPC Transit Gateways, EC2 attachments, EventBridge operations) and updated dates
Security assessment
The changes document expanded IAM permissions for a service-linked role but do not indicate remediation of a security vulnerability. While IAM permissions are security-adjacent, there is no evidence this addresses an existing security issue. The updates appear to reflect normal service capability expansion.
Diff
diff --git a/odb/latest/UserGuide/odb-manpol-updates.md b/odb/latest/UserGuide/odb-manpol-updates.md index 85085818f..6808c45c1 100644 --- a//odb/latest/UserGuide/odb-manpol-updates.md +++ b//odb/latest/UserGuide/odb-manpol-updates.md @@ -5,2 +4,0 @@ -Oracle Database@AWS is in preview release and is subject to change. - @@ -13 +11,13 @@ Change | Description | Date -[Service-linked role permissions for Oracle Database@AWS](./odb-SLR.html#odb-SLR-permissions) – Update to existing policy | Oracle Database@AWS added new permissions to the `AmazonODBServiceRolePolicy` of the `AWSServiceRoleForODB` service-linked role. These permissions allow Oracle Database@AWS to describe an Amazon EventBridge source and describe and create an event bus. For more information, see [Service-linked role permissions for Oracle Database@AWS](./odb-SLR.html#odb-SLR-permissions). | June 26, 2025 +[Service-linked role permissions for Oracle Database@AWS](./odb-SLR.html#odb-SLR-permissions) – Update to existing policy | Oracle Database@AWS added new permissions to the `AmazonODBServiceRolePolicy` of the `AWSServiceRoleForODB` service-linked role. These permissions allow Oracle Database@AWS to do the following: + + * Describe Amazon VPC Transit Gateways attachments + * Describe Amazon EC2 attachments + * Activate an Amazon EventBridge source + +For more information, see [Service-linked role permissions for Oracle Database@AWS](./odb-SLR.html#odb-SLR-permissions). | June 30, 2025 +[Service-linked role permissions for Oracle Database@AWS](./odb-SLR.html#odb-SLR-permissions) – Update to existing policy | Oracle Database@AWS added new permissions to the `AmazonODBServiceRolePolicy` of the `AWSServiceRoleForODB` service-linked role. These permissions allow Oracle Database@AWS to do the following: + + * Describe an Amazon EventBridge source + * Describe and create an event bus + +For more information, see [Service-linked role permissions for Oracle Database@AWS](./odb-SLR.html#odb-SLR-permissions). | June 26, 2025