AWS AmazonRDS documentation change
Summary
Updated documentation to clarify standby replica functionality for Db2, including disaster recovery use cases, preparation steps, and CLI command adjustments.
Security assessment
The changes explicitly document standby replicas as a disaster recovery mechanism, which is a security-adjacent feature (ensures availability). While standby replicas reduce attack surface by not accepting user connections, there is no direct evidence of addressing a specific security vulnerability. The updates enhance documentation for a reliability feature with indirect security benefits.
Diff
diff --git a/AmazonRDS/latest/UserGuide/db2-read-replicas.creating-in-standby-mode.md b/AmazonRDS/latest/UserGuide/db2-read-replicas.creating-in-standby-mode.md index 1959696be..e5d9f9528 100644 --- a//AmazonRDS/latest/UserGuide/db2-read-replicas.creating-in-standby-mode.md +++ b//AmazonRDS/latest/UserGuide/db2-read-replicas.creating-in-standby-mode.md @@ -7 +7,5 @@ -You can create a replica in standby mode by using the AWS Management Console, the AWS CLI, or the RDS API. +By default, Db2 replicas are created in read-only mode. You can create a replica in standby mode for disaster recovery purposes. Standby replicas don't accept user connections but provide faster failover capabilities for cross-Region scenarios. + +Before creating a standby replica, make sure that you have completed the preparation tasks. For more information, see [Preparing to create an RDS for Db2 replica](./db2-read-replicas.Configuration.html). After creating a standby replica, you can change the replica mode. For more information, see [Modifying the RDS for Db2 replica mode](./db2-replicas-changing-replica-mode.html). + +You can create a standby replica using the AWS Management Console, the AWS CLI, or the RDS API. For information about creating a read-only replica, see [Creating a read replica](./USER_ReadRepl.Create.html). @@ -21 +25 @@ You can create a replica in standby mode by using the AWS Management Console, th - 6. Choose the settings that you want to use. For **DB instance identifier** , enter a name for the read replica. Adjust other settings as needed. + 6. Choose the settings that you want to use. For **DB instance identifier** , enter a name for the standby replica. Adjust other settings as needed. @@ -25 +29 @@ You can create a replica in standby mode by using the AWS Management Console, th - 8. Choose your instance size and storage type. We recommend that you use the same DB instance class and storage type as the source DB instance for the read replica. + 8. Choose your instance size and storage type. We recommend that you use the same DB instance class and storage type as the source DB instance for the standby replica. @@ -38 +42 @@ In the **Databases** page, the standby replica has the role **Replica**. -To create a Db2 replica in standby mode, set `--replica-mode` to `mounted` in the AWS CLI command [ create-db-instance-read-replica](https://docs.aws.amazon.com/cli/latest/reference/rds/create-db-instance-read-replica.html). +To create a Db2 replica in standby mode, use the AWS CLI command [create-db-instance-read-replica](https://docs.aws.amazon.com/cli/latest/reference/rds/create-db-instance-read-replica.html) with `--replica-mode` set to `mounted`. @@ -44 +48 @@ For Linux, macOS, or Unix: - --db-instance-identifier my_read_replica \ + --db-instance-identifier my_standby_replica \ @@ -52 +56 @@ For Windows: - --db-instance-identifier my_read_replica ^ + --db-instance-identifier my_standby_replica ^ @@ -66 +70 @@ Preparing to create a Db2 replica -Working with Db2 replica backups +Modifying the replica mode