AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2025-10-01 · Documentation low

File: cli/latest/reference/rds/create-custom-db-engine-version.md

Summary

Updated CLI version references, reorganized parameters, added new output fields (MajorEngineVersion, S3 bucket/prefix details, KMS key ID, creation timestamp), and expanded documentation for custom engine version manifest security constraints.

Security assessment

Added documentation for KMSKeyId (encryption requirement for RDS Custom) and CustomDBEngineVersionManifest constraints with security implications. While these clarify security-related configurations, there's no evidence of addressing a specific vulnerability.

Diff

diff --git a/cli/latest/reference/rds/create-custom-db-engine-version.md b/cli/latest/reference/rds/create-custom-db-engine-version.md
index ba1cf4378..5e225e4c4 100644
--- a//cli/latest/reference/rds/create-custom-db-engine-version.md
+++ b//cli/latest/reference/rds/create-custom-db-engine-version.md
@@ -15 +15 @@
-  * [AWS CLI 2.31.3 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.5 Command Reference](../../index.html) »
@@ -72,0 +73,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rds-20
+    [--source-custom-db-engine-version-identifier <value>]
+    [--use-aws-provided-latest-image | --no-use-aws-provided-latest-image]
@@ -76,2 +77,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rds-20
-    [--source-custom-db-engine-version-identifier <value>]
-    [--use-aws-provided-latest-image | --no-use-aws-provided-latest-image]
@@ -184,0 +185,16 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rds-20
+`--source-custom-db-engine-version-identifier` (string)
+
+> The ARN of a CEV to use as a source for creating a new CEV. You can specify a different Amazon Machine Imagine (AMI) by using either `Source` or `UseAwsProvidedLatestImage` . You can’t specify a different JSON manifest when you specify `SourceCustomDbEngineVersionIdentifier` .
+> 
+> Constraints:
+> 
+>   * min: `1`
+>   * max: `255`
+>   * pattern: `.*`
+> 
+
+
+`--use-aws-provided-latest-image` | `--no-use-aws-provided-latest-image` (boolean)
+
+> Specifies whether to use the latest service-provided Amazon Machine Image (AMI) for the CEV. If you specify `UseAwsProvidedLatestImage` , you can’t also specify `ImageId` .
+
@@ -271,16 +286,0 @@ JSON Syntax:
-`--source-custom-db-engine-version-identifier` (string)
-
-> The ARN of a CEV to use as a source for creating a new CEV. You can specify a different Amazon Machine Imagine (AMI) by using either `Source` or `UseAwsProvidedLatestImage` . You can’t specify a different JSON manifest when you specify `SourceCustomDbEngineVersionIdentifier` .
-> 
-> Constraints:
-> 
->   * min: `1`
->   * max: `255`
->   * pattern: `.*`
-> 
-
-
-`--use-aws-provided-latest-image` | `--no-use-aws-provided-latest-image` (boolean)
-
-> Specifies whether to use the latest service-provided Amazon Machine Image (AMI) for the CEV. If you specify `UseAwsProvidedLatestImage` , you can’t also specify `ImageId` .
-
@@ -389,0 +390,4 @@ Engine -> (string)
+MajorEngineVersion -> (string)
+
+> The major engine version of the CEV.
+
@@ -393,0 +398,20 @@ EngineVersion -> (string)
+DatabaseInstallationFilesS3BucketName -> (string)
+
+> The name of the Amazon S3 bucket that contains your database installation files.
+
+DatabaseInstallationFilesS3Prefix -> (string)
+
+> The Amazon S3 directory that contains the database installation files. If not specified, then no prefix is assumed.
+
+CustomDBEngineVersionManifest -> (string)
+
+> JSON string that lists the installation files and parameters that RDS Custom uses to create a custom engine version (CEV). RDS Custom applies the patches in the order in which they’re listed in the manifest. You can set the Oracle home, Oracle base, and UNIX/Linux user and group using the installation parameters. For more information, see [JSON fields in the CEV manifest](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/custom-cev.preparing.html#custom-cev.preparing.manifest.fields) in the _Amazon RDS User Guide_ .
+> 
+> Constraints:
+> 
+>   * min: `1`
+>   * max: `51000`
+>   * pattern: `[\s\S]*`
+> 
+
+
@@ -401,0 +426,4 @@ DBEngineDescription -> (string)
+DBEngineVersionArn -> (string)
+
+> The ARN of the custom engine version.
+
@@ -433,0 +462,8 @@ DBEngineMediaType -> (string)
+KMSKeyId -> (string)
+
+> The Amazon Web Services KMS key identifier for an encrypted CEV. This parameter is required for RDS Custom, but optional for Amazon RDS.
+
+CreateTime -> (timestamp)
+
+> The creation time of the DB engine version.
+
@@ -590,24 +625,0 @@ SupportsGlobalDatabases -> (boolean)
-MajorEngineVersion -> (string)
-
-> The major engine version of the CEV.
-
-DatabaseInstallationFilesS3BucketName -> (string)
-
-> The name of the Amazon S3 bucket that contains your database installation files.
-
-DatabaseInstallationFilesS3Prefix -> (string)
-
-> The Amazon S3 directory that contains the database installation files. If not specified, then no prefix is assumed.
-
-DBEngineVersionArn -> (string)
-
-> The ARN of the custom engine version.
-
-KMSKeyId -> (string)
-
-> The Amazon Web Services KMS key identifier for an encrypted CEV. This parameter is required for RDS Custom, but optional for Amazon RDS.
-
-CreateTime -> (timestamp)
-
-> The creation time of the DB engine version.
-
@@ -638,12 +649,0 @@ SupportsBabelfish -> (boolean)
-CustomDBEngineVersionManifest -> (string)
-
-> JSON string that lists the installation files and parameters that RDS Custom uses to create a custom engine version (CEV). RDS Custom applies the patches in the order in which they’re listed in the manifest. You can set the Oracle home, Oracle base, and UNIX/Linux user and group using the installation parameters. For more information, see [JSON fields in the CEV manifest](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/custom-cev.preparing.html#custom-cev.preparing.manifest.fields) in the _Amazon RDS User Guide_ .
-> 
-> Constraints:
-> 
->   * min: `1`
->   * max: `51000`
->   * pattern: `[\s\S]*`
-> 
-
-
@@ -698 +698 @@ ServerlessV2FeaturesSupport -> (structure)
-  * [AWS CLI 2.31.3 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.5 Command Reference](../../index.html) »