AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2025-10-01 · Documentation low

File: cli/latest/reference/rds/delete-db-instance.md

Summary

Updated CLI version reference, restructured parameters (moved IAMDatabaseAuthenticationEnabled, added CertificateDetails), added StorageThroughput documentation, and adjusted AutomationMode/network type descriptions.

Security assessment

Added CertificateDetails section documenting server certificate management (CA identifier and expiration), which relates to TLS/SSL security configuration. However, there's no evidence this addresses a specific vulnerability. IAM authentication documentation was moved but not added. Multi-tenant configuration changes don't explicitly discuss security implications.

Diff

diff --git a/cli/latest/reference/rds/delete-db-instance.md b/cli/latest/reference/rds/delete-db-instance.md
index b18910875..53293cfb2 100644
--- a//cli/latest/reference/rds/delete-db-instance.md
+++ b//cli/latest/reference/rds/delete-db-instance.md
@@ -15 +15 @@
-  * [AWS CLI 2.31.3 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.5 Command Reference](../../index.html) »
@@ -313,4 +312,0 @@ DBInstance -> (structure)
-> AutomaticRestartTime -> (timestamp)
->
->> The time when a stopped DB instance is restarted automatically.
-> 
@@ -563,0 +560,4 @@ DBInstance -> (structure)
+>> StorageThroughput -> (integer)
+>>
+>>> The storage throughput of the DB instance.
+>> 
@@ -646,4 +645,0 @@ DBInstance -> (structure)
->> IAMDatabaseAuthenticationEnabled -> (boolean)
->>
->>> Indicates whether mapping of Amazon Web Services Identity and Access Management (IAM) accounts to database accounts is enabled.
->> 
@@ -665 +661 @@ DBInstance -> (structure)
->> StorageThroughput -> (integer)
+>> MultiTenant -> (boolean)
@@ -667 +663 @@ DBInstance -> (structure)
->>> The storage throughput of the DB instance.
+>>> Indicates whether the DB instance will change to the multi-tenant configuration (TRUE) or the single-tenant configuration (FALSE).
@@ -669 +665 @@ DBInstance -> (structure)
->> Engine -> (string)
+>> IAMDatabaseAuthenticationEnabled -> (boolean)
@@ -671 +667 @@ DBInstance -> (structure)
->>> The database engine of the DB instance.
+>>> Indicates whether mapping of Amazon Web Services Identity and Access Management (IAM) accounts to database accounts is enabled.
@@ -677 +673 @@ DBInstance -> (structure)
->> MultiTenant -> (boolean)
+>> Engine -> (string)
@@ -679 +675 @@ DBInstance -> (structure)
->>> Indicates whether the DB instance will change to the multi-tenant configuration (TRUE) or the single-tenant configuration (FALSE).
+>>> The database engine of the DB instance.
@@ -741,0 +738,6 @@ DBInstance -> (structure)
+> StorageThroughput -> (integer)
+>
+>> The storage throughput for the DB instance.
+>> 
+>> This setting applies only to the `gp3` storage type.
+> 
@@ -1075 +1077 @@ DBInstance -> (structure)
-> DBInstanceAutomatedBackupsReplications -> (list)
+> AutomationMode -> (string)
@@ -1077 +1079 @@ DBInstance -> (structure)
->> The list of replicated automated backups associated with the DB instance.
+>> The automation mode of the RDS Custom DB instance: `full` or `all paused` . If `full` , the DB instance automates monitoring and instance recovery. If `all paused` , the instance pauses automation for the duration set by `--resume-full-automation-mode-minutes` .
@@ -1079 +1081 @@ DBInstance -> (structure)
->> (structure)
+>> Possible values:
@@ -1081,5 +1083,8 @@ DBInstance -> (structure)
->>> Automated backups of a DB instance replicated to another Amazon Web Services Region. They consist of system backups, transaction logs, and database instance properties.
->>> 
->>> DBInstanceAutomatedBackupsArn -> (string)
->>>
->>>> The Amazon Resource Name (ARN) of the replicated automated backups.
+>>   * `full`
+>>   * `all-paused`
+>> 
+
+> 
+> ResumeFullAutomationModeTime -> (timestamp)
+>
+>> The number of minutes to pause the automation. When the time period ends, RDS Custom resumes full automation. The minimum value is 60 (default). The maximum value is 1,440.
@@ -1097 +1102 @@ DBInstance -> (structure)
-> AwsBackupRecoveryPointArn -> (string)
+> NetworkType -> (string)
@@ -1099 +1104,7 @@ DBInstance -> (structure)
->> The Amazon Resource Name (ARN) of the recovery point in Amazon Web Services Backup.
+>> The network type of the DB instance.
+>> 
+>> The network type is determined by the `DBSubnetGroup` specified for the DB instance. A `DBSubnetGroup` can support only the IPv4 protocol or the IPv4 and the IPv6 protocols (`DUAL` ).
+>> 
+>> For more information, see [Working with a DB instance in a VPC](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_VPC.WorkingWithRDSInstanceinaVPC.html) in the _Amazon RDS User Guide_ and [Working with a DB instance in a VPC](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_VPC.WorkingWithRDSInstanceinaVPC.html) in the _Amazon Aurora User Guide._
+>> 
+>> Valid Values: `IPV4 | DUAL`
@@ -1137 +1148 @@ DBInstance -> (structure)
-> AutomationMode -> (string)
+> AwsBackupRecoveryPointArn -> (string)
@@ -1139,3 +1150,5 @@ DBInstance -> (structure)
->> The automation mode of the RDS Custom DB instance: `full` or `all paused` . If `full` , the DB instance automates monitoring and instance recovery. If `all paused` , the instance pauses automation for the duration set by `--resume-full-automation-mode-minutes` .
->> 
->> Possible values:
+>> The Amazon Resource Name (ARN) of the recovery point in Amazon Web Services Backup.
+> 
+> DBInstanceAutomatedBackupsReplications -> (list)
+>
+>> The list of replicated automated backups associated with the DB instance.
@@ -1143,2 +1156 @@ DBInstance -> (structure)
->>   * `full`
->>   * `all-paused`
+>> (structure)
@@ -1146 +1158,5 @@ DBInstance -> (structure)
-
+>>> Automated backups of a DB instance replicated to another Amazon Web Services Region. They consist of system backups, transaction logs, and database instance properties.
+>>> 
+>>> DBInstanceAutomatedBackupsArn -> (string)
+>>>
+>>>> The Amazon Resource Name (ARN) of the replicated automated backups.
@@ -1148 +1164 @@ DBInstance -> (structure)
-> ResumeFullAutomationModeTime -> (timestamp)
+> BackupTarget -> (string)
@@ -1150 +1166,5 @@ DBInstance -> (structure)
->> The number of minutes to pause the automation. When the time period ends, RDS Custom resumes full automation. The minimum value is 60 (default). The maximum value is 1,440.
+>> The location where automated backups and manual snapshots are stored: Dedicated Local Zones, Amazon Web Services Outposts or the Amazon Web Services Region.
+> 
+> AutomaticRestartTime -> (timestamp)
+>
+>> The time when a stopped DB instance is restarted automatically.
@@ -1164,14 +1183,0 @@ DBInstance -> (structure)
-> BackupTarget -> (string)
->
->> The location where automated backups and manual snapshots are stored: Dedicated Local Zones, Amazon Web Services Outposts or the Amazon Web Services Region.
-> 
-> NetworkType -> (string)
->
->> The network type of the DB instance.
->> 
->> The network type is determined by the `DBSubnetGroup` specified for the DB instance. A `DBSubnetGroup` can support only the IPv4 protocol or the IPv4 and the IPv6 protocols (`DUAL` ).
->> 
->> For more information, see [Working with a DB instance in a VPC](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_VPC.WorkingWithRDSInstanceinaVPC.html) in the _Amazon RDS User Guide_ and [Working with a DB instance in a VPC](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_VPC.WorkingWithRDSInstanceinaVPC.html) in the _Amazon Aurora User Guide._
->> 
->> Valid Values: `IPV4 | DUAL`
-> 
@@ -1191 +1197 @@ DBInstance -> (structure)
-> StorageThroughput -> (integer)
+> CertificateDetails -> (structure)
@@ -1193 +1199 @@ DBInstance -> (structure)
->> The storage throughput for the DB instance.
+>> The details of the DB instance’s server certificate.
@@ -1195 +1201,7 @@ DBInstance -> (structure)
->> This setting applies only to the `gp3` storage type.
+>> CAIdentifier -> (string)
+>>
+>>> The CA identifier of the CA certificate used for the DB instance’s server certificate.
+>> 
+>> ValidTill -> (timestamp)
+>>
+>>> The expiration date of the DB instance’s server certificate.
@@ -1228,12 +1239,0 @@ DBInstance -> (structure)
-> CertificateDetails -> (structure)
->
->> The details of the DB instance’s server certificate.
->> 
->> CAIdentifier -> (string)
->>
->>> The CA identifier of the CA certificate used for the DB instance’s server certificate.
->> 
->> ValidTill -> (timestamp)
->>
->>> The expiration date of the DB instance’s server certificate.
-> 
@@ -1247,0 +1248,4 @@ DBInstance -> (structure)
+> MultiTenant -> (boolean)
+>
+>> Specifies whether the DB instance is in the multi-tenant configuration (TRUE) or the single-tenant configuration (FALSE).
+> 
@@ -1256,4 +1259,0 @@ DBInstance -> (structure)
-> MultiTenant -> (boolean)
->
->> Specifies whether the DB instance is in the multi-tenant configuration (TRUE) or the single-tenant configuration (FALSE).
-> 
@@ -1276 +1276 @@ DBInstance -> (structure)
-  * [AWS CLI 2.31.3 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.5 Command Reference](../../index.html) »