AWS Security ChangesHomeSearch

AWS AmazonRDS documentation change

Service: AmazonRDS · 2025-07-16 · Documentation low

File: AmazonRDS/latest/AuroraUserGuide/rds-proxy.monitoring.md

Summary

Updated recommended CloudWatch statistics for RDS Proxy metrics from 'Average' to 'Sum' across multiple connection-related metrics

Security assessment

The changes modify statistical aggregation recommendations for monitoring metrics but do not address security vulnerabilities or introduce security features. While some metrics relate to TLS connections, the change only affects measurement methodology without altering security controls or configurations.

Diff

diff --git a/AmazonRDS/latest/AuroraUserGuide/rds-proxy.monitoring.md b/AmazonRDS/latest/AuroraUserGuide/rds-proxy.monitoring.md
index c6bf2d14d..f2310382d 100644
--- a//AmazonRDS/latest/AuroraUserGuide/rds-proxy.monitoring.md
+++ b//AmazonRDS/latest/AuroraUserGuide/rds-proxy.monitoring.md
@@ -36,2 +36,2 @@ Metric  |  Description  |  Valid period  |  CloudWatch dimension set
-`AvailabilityPercentage` |  The percentage of time for which the target group was available in the role indicated by the dimension. This metric is reported every minute. The most useful statistic for this metric is `Average`.  |  1 minute  |  Dimension set 4  
-`ClientConnections` |  The current number of client connections. This metric is reported every minute. The most useful statistic for this metric is `Average`.  |  1 minute  |  Dimension set 1, Dimension set 2  
+`AvailabilityPercentage` |  The percentage of time for which the target group was available in the role indicated by the dimension. This metric is reported every minute. The most useful statistic for this metric is `Sum`.  |  1 minute  |  Dimension set 4  
+`ClientConnections` |  The current number of client connections. This metric is reported every minute. The most useful statistic for this metric is `Sum`.  |  1 minute  |  Dimension set 1, Dimension set 2  
@@ -40 +40 @@ Metric  |  Description  |  Valid period  |  CloudWatch dimension set
-`ClientConnectionsNoTLS` |  The current number of client connections without Transport Layer Security (TLS). This metric is reported every minute. The most useful statistic for this metric is `Average`.  |  1 minute |  Dimension set 1, Dimension set 2  
+`ClientConnectionsNoTLS` |  The current number of client connections without Transport Layer Security (TLS). This metric is reported every minute. The most useful statistic for this metric is `Sum`.  |  1 minute |  Dimension set 1, Dimension set 2  
@@ -44 +44 @@ Metric  |  Description  |  Valid period  |  CloudWatch dimension set
-`ClientConnectionsTLS` |  The current number of client connections with TLS. This metric is reported every minute. The most useful statistic for this metric is `Average`.  |  1 minute |  Dimension set 1, Dimension set 2  
+`ClientConnectionsTLS` |  The current number of client connections with TLS. This metric is reported every minute. The most useful statistic for this metric is `Sum`.  | 1 minute |  Dimension set 1, Dimension set 2  
@@ -47,5 +47,5 @@ Metric  |  Description  |  Valid period  |  CloudWatch dimension set
-`DatabaseConnections` |  The current number of database connections. This metric is reported every minute. The most useful statistic for this metric is `Average`.  |  1 minute  |  Dimension set 1, Dimension set 3, Dimension set 4  
-`DatabaseConnectionsBorrowLatency` |  The time in microseconds that it takes for the proxy being monitored to get a database connection. The most useful statistic for this metric is `Average`.  |  1 minute and above  |  Dimension set 1, Dimension set 2  
-`DatabaseConnectionsCurrentlyBorrowed` |  The current number of database connections in the borrow state. This metric is reported every minute. The most useful statistic for this metric is `Average`.  |  1 minute  |  Dimension set 1, Dimension set 3, Dimension set 4  
-`DatabaseConnectionsCurrentlyInTransaction` |  The current number of database connections in a transaction. This metric is reported every minute. The most useful statistic for this metric is `Average`.  |  1 minute  |  Dimension set 1, Dimension set 3, Dimension set 4  
-`DatabaseConnectionsCurrentlySessionPinned` |  The current number of database connections currently pinned because of operations in client requests that change session state. This metric is reported every minute. The most useful statistic for this metric is `Average`.  |  1 minute  |  Dimension set 1, Dimension set 3, Dimension set 4  
+`DatabaseConnections` |  The current number of database connections. This metric is reported every minute. The most useful statistic for this metric is `Sum`.  |  1 minute  |  Dimension set 1, Dimension set 3, Dimension set 4  
+`DatabaseConnectionsBorrowLatency` |  The time in microseconds that it takes for the proxy being monitored to get a database connection. The most useful statistic for this metric is `Sum`.  |  1 minute and above  |  Dimension set 1, Dimension set 2  
+`DatabaseConnectionsCurrentlyBorrowed` |  The current number of database connections in the borrow state. This metric is reported every minute. The most useful statistic for this metric is `Sum`.  |  1 minute  |  Dimension set 1, Dimension set 3, Dimension set 4  
+`DatabaseConnectionsCurrentlyInTransaction` |  The current number of database connections in a transaction. This metric is reported every minute. The most useful statistic for this metric is `Sum`.  |  1 minute  |  Dimension set 1, Dimension set 3, Dimension set 4  
+`DatabaseConnectionsCurrentlySessionPinned` |  The current number of database connections currently pinned because of operations in client requests that change session state. This metric is reported every minute. The most useful statistic for this metric is `Sum`.  |  1 minute  |  Dimension set 1, Dimension set 3, Dimension set 4  
@@ -54,2 +54,2 @@ Metric  |  Description  |  Valid period  |  CloudWatch dimension set
-`DatabaseConnectionsWithTLS` |  The current number of database connections with TLS. This metric is reported every minute. The most useful statistic for this metric is `Average`.  |  1 minute  |  Dimension set 1, Dimension set 3, Dimension set 4  
-`MaxDatabaseConnectionsAllowed` |  The maximum number of database connections allowed. This metric is reported every minute. The most useful statistic for this metric is `Average`.  |  1 minute  |  Dimension set 1, Dimension set 3, Dimension set 4  
+`DatabaseConnectionsWithTLS` |  The current number of database connections with TLS. This metric is reported every minute. The most useful statistic for this metric is `Sum`.  |  1 minute  |  Dimension set 1, Dimension set 3, Dimension set 4  
+`MaxDatabaseConnectionsAllowed` |  The maximum number of database connections allowed. This metric is reported every minute. The most useful statistic for this metric is `Sum`.  |  1 minute  |  Dimension set 1, Dimension set 3, Dimension set 4