AWS cli medium security documentation change
Summary
Updated documentation structure and added details about custom engine version (CEV) parameters including S3 installation file locations, manifest constraints, KMS encryption, and ARN properties
Security assessment
Added documentation about KMSKeyId parameter for encrypted CEVs explicitly mentions encryption requirements for RDS Custom. This directly relates to security controls for data encryption at rest. The manifest constraints (min/max/pattern) help prevent potential injection attacks by validating input format.
Diff
diff --git a/cli/latest/reference/rds/describe-db-engine-versions.md b/cli/latest/reference/rds/describe-db-engine-versions.md index 91b6e6702..7d9c12e42 100644 --- a//cli/latest/reference/rds/describe-db-engine-versions.md +++ b//cli/latest/reference/rds/describe-db-engine-versions.md @@ -15 +15 @@ - * [AWS CLI 2.31.3 Command Reference](../../index.html) » + * [AWS CLI 2.31.5 Command Reference](../../index.html) » @@ -431,0 +432,4 @@ DBEngineVersions -> (list) +>> MajorEngineVersion -> (string) +>> +>>> The major engine version of the CEV. +>> @@ -434,0 +439,20 @@ DBEngineVersions -> (list) +>> +>> DatabaseInstallationFilesS3BucketName -> (string) +>> +>>> The name of the Amazon S3 bucket that contains your database installation files. +>> +>> DatabaseInstallationFilesS3Prefix -> (string) +>> +>>> The Amazon S3 directory that contains the database installation files. If not specified, then no prefix is assumed. +>> +>> CustomDBEngineVersionManifest -> (string) +>> +>>> JSON string that lists the installation files and parameters that RDS Custom uses to create a custom engine version (CEV). RDS Custom applies the patches in the order in which they’re listed in the manifest. You can set the Oracle home, Oracle base, and UNIX/Linux user and group using the installation parameters. For more information, see [JSON fields in the CEV manifest](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/custom-cev.preparing.html#custom-cev.preparing.manifest.fields) in the _Amazon RDS User Guide_ . +>>> +>>> Constraints: +>>> +>>> * min: `1` +>>> * max: `51000` +>>> * pattern: `[\s\S]*` +>>> + @@ -443,0 +468,4 @@ DBEngineVersions -> (list) +>> DBEngineVersionArn -> (string) +>> +>>> The ARN of the custom engine version. +>> @@ -475,0 +504,8 @@ DBEngineVersions -> (list) +>> KMSKeyId -> (string) +>> +>>> The Amazon Web Services KMS key identifier for an encrypted CEV. This parameter is required for RDS Custom, but optional for Amazon RDS. +>> +>> CreateTime -> (timestamp) +>> +>>> The creation time of the DB engine version. +>> @@ -632,24 +667,0 @@ DBEngineVersions -> (list) ->> MajorEngineVersion -> (string) ->> ->>> The major engine version of the CEV. ->> ->> DatabaseInstallationFilesS3BucketName -> (string) ->> ->>> The name of the Amazon S3 bucket that contains your database installation files. ->> ->> DatabaseInstallationFilesS3Prefix -> (string) ->> ->>> The Amazon S3 directory that contains the database installation files. If not specified, then no prefix is assumed. ->> ->> DBEngineVersionArn -> (string) ->> ->>> The ARN of the custom engine version. ->> ->> KMSKeyId -> (string) ->> ->>> The Amazon Web Services KMS key identifier for an encrypted CEV. This parameter is required for RDS Custom, but optional for Amazon RDS. ->> ->> CreateTime -> (timestamp) ->> ->>> The creation time of the DB engine version. ->> @@ -679,12 +690,0 @@ DBEngineVersions -> (list) ->> ->> CustomDBEngineVersionManifest -> (string) ->> ->>> JSON string that lists the installation files and parameters that RDS Custom uses to create a custom engine version (CEV). RDS Custom applies the patches in the order in which they’re listed in the manifest. You can set the Oracle home, Oracle base, and UNIX/Linux user and group using the installation parameters. For more information, see [JSON fields in the CEV manifest](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/custom-cev.preparing.html#custom-cev.preparing.manifest.fields) in the _Amazon RDS User Guide_ . ->>> ->>> Constraints: ->>> ->>> * min: `1` ->>> * max: `51000` ->>> * pattern: `[\s\S]*` ->>> - @@ -740 +740 @@ DBEngineVersions -> (list) - * [AWS CLI 2.31.3 Command Reference](../../index.html) » + * [AWS CLI 2.31.5 Command Reference](../../index.html) »