AWS cli low security documentation change
Summary
Updated CLI version reference from 2.31.3 to 2.31.5 and restructured field documentation for DB instance properties including storage throughput, automation modes, certificate details, and multi-tenant configuration.
Security assessment
The addition of CertificateDetails structure documenting CA certificate identifiers and expiration dates directly relates to security best practices for SSL/TLS certificate management. This helps users monitor certificate validity, which is critical for maintaining secure connections. However, there's no evidence this addresses a specific vulnerability.
Diff
diff --git a/cli/latest/reference/rds/describe-db-instances.md b/cli/latest/reference/rds/describe-db-instances.md index 4f2be9aa7..fc3f7416c 100644 --- a//cli/latest/reference/rds/describe-db-instances.md +++ b//cli/latest/reference/rds/describe-db-instances.md @@ -15 +15 @@ - * [AWS CLI 2.31.3 Command Reference](../../index.html) » + * [AWS CLI 2.31.5 Command Reference](../../index.html) » @@ -363,4 +362,0 @@ DBInstances -> (list) ->> AutomaticRestartTime -> (timestamp) ->> ->>> The time when a stopped DB instance is restarted automatically. ->> @@ -613,0 +610,4 @@ DBInstances -> (list) +>>> StorageThroughput -> (integer) +>>> +>>>> The storage throughput of the DB instance. +>>> @@ -696,4 +695,0 @@ DBInstances -> (list) ->>> IAMDatabaseAuthenticationEnabled -> (boolean) ->>> ->>>> Indicates whether mapping of Amazon Web Services Identity and Access Management (IAM) accounts to database accounts is enabled. ->>> @@ -715 +711 @@ DBInstances -> (list) ->>> StorageThroughput -> (integer) +>>> MultiTenant -> (boolean) @@ -717 +713 @@ DBInstances -> (list) ->>>> The storage throughput of the DB instance. +>>>> Indicates whether the DB instance will change to the multi-tenant configuration (TRUE) or the single-tenant configuration (FALSE). @@ -719 +715 @@ DBInstances -> (list) ->>> Engine -> (string) +>>> IAMDatabaseAuthenticationEnabled -> (boolean) @@ -721 +717 @@ DBInstances -> (list) ->>>> The database engine of the DB instance. +>>>> Indicates whether mapping of Amazon Web Services Identity and Access Management (IAM) accounts to database accounts is enabled. @@ -727 +723 @@ DBInstances -> (list) ->>> MultiTenant -> (boolean) +>>> Engine -> (string) @@ -729 +725 @@ DBInstances -> (list) ->>>> Indicates whether the DB instance will change to the multi-tenant configuration (TRUE) or the single-tenant configuration (FALSE). +>>>> The database engine of the DB instance. @@ -791,0 +788,6 @@ DBInstances -> (list) +>> StorageThroughput -> (integer) +>> +>>> The storage throughput for the DB instance. +>>> +>>> This setting applies only to the `gp3` storage type. +>> @@ -1125 +1127 @@ DBInstances -> (list) ->> DBInstanceAutomatedBackupsReplications -> (list) +>> AutomationMode -> (string) @@ -1127 +1129 @@ DBInstances -> (list) ->>> The list of replicated automated backups associated with the DB instance. +>>> The automation mode of the RDS Custom DB instance: `full` or `all paused` . If `full` , the DB instance automates monitoring and instance recovery. If `all paused` , the instance pauses automation for the duration set by `--resume-full-automation-mode-minutes` . @@ -1129 +1131 @@ DBInstances -> (list) ->>> (structure) +>>> Possible values: @@ -1131,5 +1133,8 @@ DBInstances -> (list) ->>>> Automated backups of a DB instance replicated to another Amazon Web Services Region. They consist of system backups, transaction logs, and database instance properties. ->>>> ->>>> DBInstanceAutomatedBackupsArn -> (string) ->>>> ->>>>> The Amazon Resource Name (ARN) of the replicated automated backups. +>>> * `full` +>>> * `all-paused` +>>> + +>> +>> ResumeFullAutomationModeTime -> (timestamp) +>> +>>> The number of minutes to pause the automation. When the time period ends, RDS Custom resumes full automation. The minimum value is 60 (default). The maximum value is 1,440. @@ -1147 +1152 @@ DBInstances -> (list) ->> AwsBackupRecoveryPointArn -> (string) +>> NetworkType -> (string) @@ -1149 +1154,7 @@ DBInstances -> (list) ->>> The Amazon Resource Name (ARN) of the recovery point in Amazon Web Services Backup. +>>> The network type of the DB instance. +>>> +>>> The network type is determined by the `DBSubnetGroup` specified for the DB instance. A `DBSubnetGroup` can support only the IPv4 protocol or the IPv4 and the IPv6 protocols (`DUAL` ). +>>> +>>> For more information, see [Working with a DB instance in a VPC](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_VPC.WorkingWithRDSInstanceinaVPC.html) in the _Amazon RDS User Guide_ and [Working with a DB instance in a VPC](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_VPC.WorkingWithRDSInstanceinaVPC.html) in the _Amazon Aurora User Guide._ +>>> +>>> Valid Values: `IPV4 | DUAL` @@ -1187 +1198 @@ DBInstances -> (list) ->> AutomationMode -> (string) +>> AwsBackupRecoveryPointArn -> (string) @@ -1189,3 +1200,5 @@ DBInstances -> (list) ->>> The automation mode of the RDS Custom DB instance: `full` or `all paused` . If `full` , the DB instance automates monitoring and instance recovery. If `all paused` , the instance pauses automation for the duration set by `--resume-full-automation-mode-minutes` . ->>> ->>> Possible values: +>>> The Amazon Resource Name (ARN) of the recovery point in Amazon Web Services Backup. +>> +>> DBInstanceAutomatedBackupsReplications -> (list) +>> +>>> The list of replicated automated backups associated with the DB instance. @@ -1193,2 +1206 @@ DBInstances -> (list) ->>> * `full` ->>> * `all-paused` +>>> (structure) @@ -1196 +1208,5 @@ DBInstances -> (list) - +>>>> Automated backups of a DB instance replicated to another Amazon Web Services Region. They consist of system backups, transaction logs, and database instance properties. +>>>> +>>>> DBInstanceAutomatedBackupsArn -> (string) +>>>> +>>>>> The Amazon Resource Name (ARN) of the replicated automated backups. @@ -1198 +1214 @@ DBInstances -> (list) ->> ResumeFullAutomationModeTime -> (timestamp) +>> BackupTarget -> (string) @@ -1200 +1216,5 @@ DBInstances -> (list) ->>> The number of minutes to pause the automation. When the time period ends, RDS Custom resumes full automation. The minimum value is 60 (default). The maximum value is 1,440. +>>> The location where automated backups and manual snapshots are stored: Dedicated Local Zones, Amazon Web Services Outposts or the Amazon Web Services Region. +>> +>> AutomaticRestartTime -> (timestamp) +>> +>>> The time when a stopped DB instance is restarted automatically. @@ -1214,14 +1233,0 @@ DBInstances -> (list) ->> BackupTarget -> (string) ->> ->>> The location where automated backups and manual snapshots are stored: Dedicated Local Zones, Amazon Web Services Outposts or the Amazon Web Services Region. ->> ->> NetworkType -> (string) ->> ->>> The network type of the DB instance. ->>> ->>> The network type is determined by the `DBSubnetGroup` specified for the DB instance. A `DBSubnetGroup` can support only the IPv4 protocol or the IPv4 and the IPv6 protocols (`DUAL` ). ->>> ->>> For more information, see [Working with a DB instance in a VPC](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_VPC.WorkingWithRDSInstanceinaVPC.html) in the _Amazon RDS User Guide_ and [Working with a DB instance in a VPC](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_VPC.WorkingWithRDSInstanceinaVPC.html) in the _Amazon Aurora User Guide._ ->>> ->>> Valid Values: `IPV4 | DUAL` ->> @@ -1241 +1247 @@ DBInstances -> (list) ->> StorageThroughput -> (integer) +>> CertificateDetails -> (structure) @@ -1243 +1249 @@ DBInstances -> (list) ->>> The storage throughput for the DB instance. +>>> The details of the DB instance’s server certificate. @@ -1245 +1251,7 @@ DBInstances -> (list) ->>> This setting applies only to the `gp3` storage type. +>>> CAIdentifier -> (string) +>>> +>>>> The CA identifier of the CA certificate used for the DB instance’s server certificate. +>>> +>>> ValidTill -> (timestamp) +>>> +>>>> The expiration date of the DB instance’s server certificate. @@ -1278,12 +1289,0 @@ DBInstances -> (list) ->> CertificateDetails -> (structure) ->> ->>> The details of the DB instance’s server certificate. ->>> ->>> CAIdentifier -> (string) ->>> ->>>> The CA identifier of the CA certificate used for the DB instance’s server certificate. ->>> ->>> ValidTill -> (timestamp) ->>> ->>>> The expiration date of the DB instance’s server certificate. ->> @@ -1297,0 +1298,4 @@ DBInstances -> (list) +>> MultiTenant -> (boolean) +>> +>>> Specifies whether the DB instance is in the multi-tenant configuration (TRUE) or the single-tenant configuration (FALSE). +>> @@ -1306,4 +1309,0 @@ DBInstances -> (list) ->> MultiTenant -> (boolean) ->> ->>> Specifies whether the DB instance is in the multi-tenant configuration (TRUE) or the single-tenant configuration (FALSE). ->> @@ -1326 +1326 @@ DBInstances -> (list) - * [AWS CLI 2.31.3 Command Reference](../../index.html) » + * [AWS CLI 2.31.5 Command Reference](../../index.html) »