AWS AmazonRDS documentation change
Summary
Updated certificate authority common names to include 'Root CA' designation
Security assessment
Clarifies certificate hierarchy but doesn't introduce new security features or address vulnerabilities.
Diff
diff --git a/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.SSL.md b/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.SSL.md index c4ff2a39d..0b98b9e5d 100644 --- a//AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.SSL.md +++ b//AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.SSL.md @@ -40,3 +40,3 @@ Certificate authority (CA) | Description | Common name (CN) -rds-ca-rsa2048-g1 | Uses a certificate authority with RSA 2048 private key algorithm and SHA256 signing algorithm in most AWS Regions. In the AWS GovCloud (US) Regions, this CA uses a certificate authority with RSA 2048 private key algorithm and SHA384 signing algorithm. This CA supports automatic server certificate rotation. | Amazon RDS `region-identifier` RSA2048 G1 -rds-ca-rsa4096-g1 | Uses a certificate authority with RSA 4096 private key algorithm and SHA384 signing algorithm. This CA supports automatic server certificate rotation. | Amazon RDS `region-identifier` RSA4096 G1 -rds-ca-ecc384-g1 | Uses a certificate authority with ECC 384 private key algorithm and SHA384 signing algorithm. This CA supports automatic server certificate rotation. | Amazon RDS `region-identifier` ECC384 G1 +rds-ca-rsa2048-g1 | Uses a certificate authority with RSA 2048 private key algorithm and SHA256 signing algorithm in most AWS Regions. In the AWS GovCloud (US) Regions, this CA uses a certificate authority with RSA 2048 private key algorithm and SHA384 signing algorithm. This CA supports automatic server certificate rotation. | Amazon RDS `region-identifier` Root CA RSA2048 G1 +rds-ca-rsa4096-g1 | Uses a certificate authority with RSA 4096 private key algorithm and SHA384 signing algorithm. This CA supports automatic server certificate rotation. | Amazon RDS `region-identifier` Root CA RSA4096 G1 +rds-ca-ecc384-g1 | Uses a certificate authority with ECC 384 private key algorithm and SHA384 signing algorithm. This CA supports automatic server certificate rotation. | Amazon RDS `region-identifier` Root CA ECC384 G1