AWS AmazonRDS documentation change
Summary
Added warning about DISCARD ALL command causing connection pinning
Security assessment
Documents a functional limitation of connection pooling, not a security vulnerability.
Diff
diff --git a/AmazonRDS/latest/AuroraUserGuide/rds-proxy-pinning.md b/AmazonRDS/latest/AuroraUserGuide/rds-proxy-pinning.md index 7fe9b3013..4cf4c0645 100644 --- a//AmazonRDS/latest/AuroraUserGuide/rds-proxy-pinning.md +++ b//AmazonRDS/latest/AuroraUserGuide/rds-proxy-pinning.md @@ -175,0 +176,2 @@ RDS Proxy does not pin on transaction level advisory locks, specifically `pg_adv + * Discarding session state. If you use connection pooling libraries with `DISCARD ALL` query configured as a reset query, RDS Proxy pins your client connection on release. This reduces the proxy's multiplexing efficiency and might lead to umexpected results because the `DISCARD ALL` command can interfere with session state management. +