AWS AmazonRDS documentation change
Summary
Updated certificate authority common names to include 'Root CA' in descriptions
Security assessment
Clarifies SSL certificate hierarchy documentation, which helps with proper certificate validation - a security best practice, but doesn't address a specific vulnerability.
Diff
diff --git a/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL.md b/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL.md index 1b6d74f25..bd82688cd 100644 --- a//AmazonRDS/latest/UserGuide/UsingWithRDS.SSL.md +++ b//AmazonRDS/latest/UserGuide/UsingWithRDS.SSL.md @@ -48,3 +48,3 @@ Certificate authority (CA) | Description | Common name (CN) -rds-ca-rsa2048-g1 | Uses a certificate authority with RSA 2048 private key algorithm and SHA256 signing algorithm in most AWS Regions. In the AWS GovCloud (US) Regions, this CA uses a certificate authority with RSA 2048 private key algorithm and SHA384 signing algorithm. This CA supports automatic server certificate rotation. | Amazon RDS `region-identifier` RSA2048 G1 -rds-ca-rsa4096-g1 | Uses a certificate authority with RSA 4096 private key algorithm and SHA384 signing algorithm. This CA supports automatic server certificate rotation. | Amazon RDS `region-identifier` RSA4096 G1 -rds-ca-ecc384-g1 | Uses a certificate authority with ECC 384 private key algorithm and SHA384 signing algorithm. This CA supports automatic server certificate rotation. | Amazon RDS `region-identifier` ECC384 G1 +rds-ca-rsa2048-g1 | Uses a certificate authority with RSA 2048 private key algorithm and SHA256 signing algorithm in most AWS Regions. In the AWS GovCloud (US) Regions, this CA uses a certificate authority with RSA 2048 private key algorithm and SHA384 signing algorithm. This CA supports automatic server certificate rotation. | Amazon RDS `region-identifier` Root CA RSA2048 G1 +rds-ca-rsa4096-g1 | Uses a certificate authority with RSA 4096 private key algorithm and SHA384 signing algorithm. This CA supports automatic server certificate rotation. | Amazon RDS `region-identifier` Root CA RSA4096 G1 +rds-ca-ecc384-g1 | Uses a certificate authority with ECC 384 private key algorithm and SHA384 signing algorithm. This CA supports automatic server certificate rotation. | Amazon RDS `region-identifier` Root CA ECC384 G1