AWS fis documentation change
Summary
Added documentation for Amazon Aurora DSQL actions, including connection failure injection for resilience testing.
Security assessment
The new section documents fault injection testing capabilities for Aurora DSQL, which supports resilience and disaster recovery planning. While this relates to security best practices (e.g., testing failure scenarios), it does not address a specific security vulnerability.
Diff
diff --git a/fis/latest/userguide/fis-actions-reference.md b/fis/latest/userguide/fis-actions-reference.md index e5f79498c..b758f6494 100644 --- a//fis/latest/userguide/fis-actions-reference.md +++ b//fis/latest/userguide/fis-actions-reference.md @@ -5 +5 @@ -Fault injection actionsRecovery actionWait actionAmazon CloudWatch actionsAmazon DynamoDB actionsAmazon EBS actionsAmazon EC2 actionsAmazon ECS actionsAmazon EKS actionsAmazon ElastiCache actionsAWS Lambda actionsAmazon MemoryDB actionNetwork actionsAmazon RDS actionsAmazon S3 actionsSystems Manager actions +Fault injection actionsRecovery actionWait actionAmazon CloudWatch actionsAmazon DynamoDB actionsAmazon Aurora DSQL actionsAmazon EBS actionsAmazon EC2 actionsAmazon ECS actionsAmazon EKS actionsAmazon ElastiCache actionsAWS Lambda actionsAmazon MemoryDB actionNetwork actionsAmazon RDS actionsAmazon S3 actionsSystems Manager actions @@ -26,0 +27,2 @@ For more information on how AWS FIS actions work, see [Actions for AWS FIS](./ac + * Amazon Aurora DSQL actions + @@ -373,0 +376,37 @@ If a target table or stream does not have any attached resource polices, a resou +## Amazon Aurora DSQL actions + +AWS FIS supports the following Amazon Aurora DSQL actions. + +### aws:dsql:cluster-connection-failure + +Creates controlled connection failures in an Aurora DSQL cluster for a specified duration to test application resilience. + +###### Resource type + + * **aws:dsql:cluster** + + + + +###### Parameters + + * **duration** – The duration, from one minute to 12 hours. In the AWS FIS API, the value is a string in ISO 8601 format. For example, PT1M represents one minute. In the AWS FIS console, you enter the number of seconds, minutes, or hours. + + * **percentage** – The percentage (1-100) of calls to inject the fault into. + + + + +###### Permissions + + * `dsql:InjectError` + + * `dsql:GetCluster` + + * `tag:GetResources` + + + + +To initiate the experiment with Aurora DSQL, see [Fault injection testing](https://docs.aws.amazon.com/aurora-dsql/latest/userguide/disaster-recovery-resiliency.html#fault-injection-testing.html) in the _Aurora DSQL User Guide_. +