AWS Security ChangesHomeSearch

AWS AmazonRDS documentation change

Service: AmazonRDS · 2025-07-16 · Documentation low

File: AmazonRDS/latest/UserGuide/rds-proxy.monitoring.md

Summary

Updated CloudWatch metric statistics recommendations from 'Average' to 'Sum' for multiple RDS Proxy monitoring metrics

Security assessment

The changes modify statistical aggregation recommendations but do not address security vulnerabilities or introduce security features. Metrics like ClientConnectionsNoTLS relate to security monitoring but the statistic change itself doesn't fix vulnerabilities or add protections.

Diff

diff --git a/AmazonRDS/latest/UserGuide/rds-proxy.monitoring.md b/AmazonRDS/latest/UserGuide/rds-proxy.monitoring.md
index 627b2a2aa..b62d6def3 100644
--- a//AmazonRDS/latest/UserGuide/rds-proxy.monitoring.md
+++ b//AmazonRDS/latest/UserGuide/rds-proxy.monitoring.md
@@ -36,2 +36,2 @@ Metric  |  Description  |  Valid period  |  CloudWatch dimension set
-`AvailabilityPercentage` |  The percentage of time for which the target group was available in the role indicated by the dimension. This metric is reported every minute. The most useful statistic for this metric is `Average`.  |  1 minute  |  Dimension set 4  
-`ClientConnections` |  The current number of client connections. This metric is reported every minute. The most useful statistic for this metric is `Average`.  |  1 minute  |  Dimension set 1, Dimension set 2  
+`AvailabilityPercentage` |  The percentage of time for which the target group was available in the role indicated by the dimension. This metric is reported every minute. The most useful statistic for this metric is `Sum`.  |  1 minute  |  Dimension set 4  
+`ClientConnections` |  The current number of client connections. This metric is reported every minute. The most useful statistic for this metric is `Sum`.  |  1 minute  |  Dimension set 1, Dimension set 2  
@@ -40 +40 @@ Metric  |  Description  |  Valid period  |  CloudWatch dimension set
-`ClientConnectionsNoTLS` |  The current number of client connections without Transport Layer Security (TLS). This metric is reported every minute. The most useful statistic for this metric is `Average`.  |  1 minute |  Dimension set 1, Dimension set 2  
+`ClientConnectionsNoTLS` |  The current number of client connections without Transport Layer Security (TLS). This metric is reported every minute. The most useful statistic for this metric is `Sum`.  |  1 minute |  Dimension set 1, Dimension set 2  
@@ -44 +44 @@ Metric  |  Description  |  Valid period  |  CloudWatch dimension set
-`ClientConnectionsTLS` |  The current number of client connections with TLS. This metric is reported every minute. The most useful statistic for this metric is `Average`.  |  1 minute |  Dimension set 1, Dimension set 2  
+`ClientConnectionsTLS` |  The current number of client connections with TLS. This metric is reported every minute. The most useful statistic for this metric is `Sum`.  | 1 minute |  Dimension set 1, Dimension set 2  
@@ -47,5 +47,5 @@ Metric  |  Description  |  Valid period  |  CloudWatch dimension set
-`DatabaseConnections` |  The current number of database connections. This metric is reported every minute. The most useful statistic for this metric is `Average`.  |  1 minute  |  Dimension set 1, Dimension set 3, Dimension set 4  
-`DatabaseConnectionsBorrowLatency` |  The time in microseconds that it takes for the proxy being monitored to get a database connection. The most useful statistic for this metric is `Average`.  |  1 minute and above  |  Dimension set 1, Dimension set 2  
-`DatabaseConnectionsCurrentlyBorrowed` |  The current number of database connections in the borrow state. This metric is reported every minute. The most useful statistic for this metric is `Average`.  |  1 minute  |  Dimension set 1, Dimension set 3, Dimension set 4  
-`DatabaseConnectionsCurrentlyInTransaction` |  The current number of database connections in a transaction. This metric is reported every minute. The most useful statistic for this metric is `Average`.  |  1 minute  |  Dimension set 1, Dimension set 3, Dimension set 4  
-`DatabaseConnectionsCurrentlySessionPinned` |  The current number of database connections currently pinned because of operations in client requests that change session state. This metric is reported every minute. The most useful statistic for this metric is `Average`.  |  1 minute  |  Dimension set 1, Dimension set 3, Dimension set 4  
+`DatabaseConnections` |  The current number of database connections. This metric is reported every minute. The most useful statistic for this metric is `Sum`.  |  1 minute  |  Dimension set 1, Dimension set 3, Dimension set 4  
+`DatabaseConnectionsBorrowLatency` |  The time in microseconds that it takes for the proxy being monitored to get a database connection. The most useful statistic for this metric is `Sum`.  |  1 minute and above  |  Dimension set 1, Dimension set 2  
+`DatabaseConnectionsCurrentlyBorrowed` |  The current number of database connections in the borrow state. This metric is reported every minute. The most useful statistic for this metric is `Sum`.  |  1 minute  |  Dimension set 1, Dimension set 3, Dimension set 4  
+`DatabaseConnectionsCurrentlyInTransaction` |  The current number of database connections in a transaction. This metric is reported every minute. The most useful statistic for this metric is `Sum`.  |  1 minute  |  Dimension set 1, Dimension set 3, Dimension set 4  
+`DatabaseConnectionsCurrentlySessionPinned` |  The current number of database connections currently pinned because of operations in client requests that change session state. This metric is reported every minute. The most useful statistic for this metric is `Sum`.  |  1 minute  |  Dimension set 1, Dimension set 3, Dimension set 4  
@@ -54,2 +54,2 @@ Metric  |  Description  |  Valid period  |  CloudWatch dimension set
-`DatabaseConnectionsWithTLS` |  The current number of database connections with TLS. This metric is reported every minute. The most useful statistic for this metric is `Average`.  |  1 minute  |  Dimension set 1, Dimension set 3, Dimension set 4  
-`MaxDatabaseConnectionsAllowed` |  The maximum number of database connections allowed. This metric is reported every minute. The most useful statistic for this metric is `Average`.  |  1 minute  |  Dimension set 1, Dimension set 3, Dimension set 4  
+`DatabaseConnectionsWithTLS` |  The current number of database connections with TLS. This metric is reported every minute. The most useful statistic for this metric is `Sum`.  |  1 minute  |  Dimension set 1, Dimension set 3, Dimension set 4  
+`MaxDatabaseConnectionsAllowed` |  The maximum number of database connections allowed. This metric is reported every minute. The most useful statistic for this metric is `Sum`.  |  1 minute  |  Dimension set 1, Dimension set 3, Dimension set 4