AWS Security ChangesHomeSearch

AWS AmazonRDS medium security documentation change

Service: AmazonRDS · 2025-08-28 · Security-related medium

File: AmazonRDS/latest/UserGuide/MariaDB.Concepts.SSLSupport.md

Summary

Updated TLS version support matrix to include MariaDB 11.8 and restrict older TLS versions

Security assessment

The update removes TLS 1.0/1.1 support for MariaDB 11.8 and 11.4 versions, phasing out insecure protocols. This aligns with security best practices to disable deprecated TLS versions known to have vulnerabilities.

Diff

diff --git a/AmazonRDS/latest/UserGuide/MariaDB.Concepts.SSLSupport.md b/AmazonRDS/latest/UserGuide/MariaDB.Concepts.SSLSupport.md
index 5a642ddb9..12773741b 100644
--- a//AmazonRDS/latest/UserGuide/MariaDB.Concepts.SSLSupport.md
+++ b//AmazonRDS/latest/UserGuide/MariaDB.Concepts.SSLSupport.md
@@ -15,2 +15,2 @@ Amazon RDS for MariaDB supports Transport Layer Security (TLS) versions 1.3, 1.2
-TLS version | MariaDB 11.4 | MariaDB 10.11 | MariaDB 10.6 | MariaDB 10.5 | MariaDB 10.4  
----|---|---|---|---|---  
+TLS version | MariaDB 11.8 | MariaDB 11.4 | MariaDB 10.11 | MariaDB 10.6 | MariaDB 10.5 | MariaDB 10.4  
+---|---|---|---|---|---|---  
@@ -19,2 +19,2 @@ TLS 1.2 |  All minor versions |  All minor versions |  All minor versions |  All
-TLS 1.1 |  Not supported |  10.11.6 and lower |  10.6.16 and lower |  10.5.23 and lower |  10.4.32 and lower  
-TLS 1.0 |  Not supported | 10.11.6 and lower | 10.6.16 and lower |  10.5.23 and lower |  10.4.32 and lower  
+TLS 1.1 |  Not supported |  Not supported |  10.6.16 and lower |  10.5.23 and lower |  10.4.32 and lower  
+TLS 1.0 |  Not supported | Not supported | 10.6.16 and lower |  10.5.23 and lower |  10.4.32 and lower