AWS cli documentation change
Summary
Updated CLI version reference from 2.31.3 to 2.31.5, reordered parameters, added --enable-local-write-forwarding flag documentation, restructured serverless v2 scaling configuration and network type documentation, added new fields in DBCluster response structure including security-related certificate details and public accessibility
Security assessment
Added documentation for CertificateDetails (CAIdentifier and certificate expiration) and PubliclyAccessible field which relate to SSL/TLS configuration and network exposure. However, there is no evidence these changes address a specific security vulnerability.
Diff
diff --git a/cli/latest/reference/rds/modify-db-cluster.md b/cli/latest/reference/rds/modify-db-cluster.md index 78a3d81e7..30213669b 100644 --- a//cli/latest/reference/rds/modify-db-cluster.md +++ b//cli/latest/reference/rds/modify-db-cluster.md @@ -15 +15 @@ - * [AWS CLI 2.31.3 Command Reference](../../index.html) » + * [AWS CLI 2.31.5 Command Reference](../../index.html) » @@ -100,0 +101,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rds-20 + [--network-type <value>] + [--serverless-v2-scaling-configuration <value>] @@ -107,2 +108,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rds-20 - [--serverless-v2-scaling-configuration <value>] - [--network-type <value>] @@ -110,0 +111 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rds-20 + [--enable-local-write-forwarding | --no-enable-local-write-forwarding] @@ -114 +114,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rds-20 - [--enable-local-write-forwarding | --no-enable-local-write-forwarding] @@ -606,0 +607,48 @@ JSON Syntax: +`--network-type` (string) + +> The network type of the DB cluster. +> +> The network type is determined by the `DBSubnetGroup` specified for the DB cluster. A `DBSubnetGroup` can support only the IPv4 protocol or the IPv4 and the IPv6 protocols (`DUAL` ). +> +> For more information, see [Working with a DB instance in a VPC](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_VPC.WorkingWithRDSInstanceinaVPC.html) in the _Amazon Aurora User Guide._ +> +> Valid for Cluster Type: Aurora DB clusters only +> +> Valid Values: `IPV4 | DUAL` + +`--serverless-v2-scaling-configuration` (structure) + +> Contains the scaling configuration of an Aurora Serverless v2 DB cluster. +> +> For more information, see [Using Amazon Aurora Serverless v2](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/aurora-serverless-v2.html) in the _Amazon Aurora User Guide_ . +> +> MinCapacity -> (double) +> +>> The minimum number of Aurora capacity units (ACUs) for a DB instance in an Aurora Serverless v2 cluster. You can specify ACU values in half-step increments, such as 8, 8.5, 9, and so on. For Aurora versions that support the Aurora Serverless v2 auto-pause feature, the smallest value that you can use is 0. For versions that don’t support Aurora Serverless v2 auto-pause, the smallest value that you can use is 0.5. +> +> MaxCapacity -> (double) +> +>> The maximum number of Aurora capacity units (ACUs) for a DB instance in an Aurora Serverless v2 cluster. You can specify ACU values in half-step increments, such as 32, 32.5, 33, and so on. The largest value that you can use is 256 for recent Aurora versions, or 128 for older versions. You can check the attributes of your engine version or platform version to determine the specific maximum capacity supported. +> +> SecondsUntilAutoPause -> (integer) +> +>> Specifies the number of seconds an Aurora Serverless v2 DB instance must be idle before Aurora attempts to automatically pause it. +>> +>> Specify a value between 300 seconds (five minutes) and 86,400 seconds (one day). The default is 300 seconds. + +Shorthand Syntax: + + + MinCapacity=double,MaxCapacity=double,SecondsUntilAutoPause=integer + + +JSON Syntax: + + + { + "MinCapacity": double, + "MaxCapacity": double, + "SecondsUntilAutoPause": integer + } + + @@ -680,48 +727,0 @@ JSON Syntax: -`--serverless-v2-scaling-configuration` (structure) - -> Contains the scaling configuration of an Aurora Serverless v2 DB cluster. -> -> For more information, see [Using Amazon Aurora Serverless v2](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/aurora-serverless-v2.html) in the _Amazon Aurora User Guide_ . -> -> MinCapacity -> (double) -> ->> The minimum number of Aurora capacity units (ACUs) for a DB instance in an Aurora Serverless v2 cluster. You can specify ACU values in half-step increments, such as 8, 8.5, 9, and so on. For Aurora versions that support the Aurora Serverless v2 auto-pause feature, the smallest value that you can use is 0. For versions that don’t support Aurora Serverless v2 auto-pause, the smallest value that you can use is 0.5. -> -> MaxCapacity -> (double) -> ->> The maximum number of Aurora capacity units (ACUs) for a DB instance in an Aurora Serverless v2 cluster. You can specify ACU values in half-step increments, such as 32, 32.5, 33, and so on. The largest value that you can use is 256 for recent Aurora versions, or 128 for older versions. You can check the attributes of your engine version or platform version to determine the specific maximum capacity supported. -> -> SecondsUntilAutoPause -> (integer) -> ->> Specifies the number of seconds an Aurora Serverless v2 DB instance must be idle before Aurora attempts to automatically pause it. ->> ->> Specify a value between 300 seconds (five minutes) and 86,400 seconds (one day). The default is 300 seconds. - -Shorthand Syntax: - - - MinCapacity=double,MaxCapacity=double,SecondsUntilAutoPause=integer - - -JSON Syntax: - - - { - "MinCapacity": double, - "MaxCapacity": double, - "SecondsUntilAutoPause": integer - } - - -`--network-type` (string) - -> The network type of the DB cluster. -> -> The network type is determined by the `DBSubnetGroup` specified for the DB cluster. A `DBSubnetGroup` can support only the IPv4 protocol or the IPv4 and the IPv6 protocols (`DUAL` ). -> -> For more information, see [Working with a DB instance in a VPC](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_VPC.WorkingWithRDSInstanceinaVPC.html) in the _Amazon Aurora User Guide._ -> -> Valid for Cluster Type: Aurora DB clusters only -> -> Valid Values: `IPV4 | DUAL` - @@ -755,0 +756,6 @@ JSON Syntax: +`--enable-local-write-forwarding` | `--no-enable-local-write-forwarding` (boolean) + +> Specifies whether read replicas can forward write operations to the writer DB instance in the DB cluster. By default, write operations aren’t allowed on reader DB instances. +> +> Valid for: Aurora DB clusters only + @@ -797,6 +802,0 @@ JSON Syntax: -`--enable-local-write-forwarding` | `--no-enable-local-write-forwarding` (boolean) - -> Specifies whether read replicas can forward write operations to the writer DB instance in the DB cluster. By default, write operations aren’t allowed on reader DB instances. -> -> Valid for: Aurora DB clusters only - @@ -1146,4 +1145,0 @@ DBCluster -> (structure) -> AutomaticRestartTime -> (timestamp) -> ->> The time when a stopped DB cluster is restarted automatically. -> @@ -1387,0 +1384,89 @@ DBCluster -> (structure) +> PendingModifiedValues -> (structure) +> +>> Information about pending changes to the DB cluster. This information is returned only when there are pending changes. Specific changes are identified by subelements. +>> +>> PendingCloudwatchLogsExports -> (structure) +>> +>>> A list of the log types whose configuration is still pending. In other words, these log types are in the process of being activated or deactivated. +>>> +>>> LogTypesToEnable -> (list) +>>> +>>>> Log types that are in the process of being deactivated. After they are deactivated, these log types aren’t exported to CloudWatch Logs. +>>>> +>>>> (string) +>>> +>>> LogTypesToDisable -> (list) +>>> +>>>> Log types that are in the process of being enabled. After they are enabled, these log types are exported to CloudWatch Logs. +>>>> +>>>> (string) +>> +>> DBClusterIdentifier -> (string) +>> +>>> The DBClusterIdentifier value for the DB cluster. +>> +>> MasterUserPassword -> (string) +>> +>>> The master credentials for the DB cluster. +>> +>> IAMDatabaseAuthenticationEnabled -> (boolean) +>> +>>> Indicates whether mapping of Amazon Web Services Identity and Access Management (IAM) accounts to database accounts is enabled. +>> +>> EngineVersion -> (string) +>> +>>> The database engine version. +>> +>> BackupRetentionPeriod -> (integer) +>> +>>> The number of days for which automatic DB snapshots are retained. +>> +>> StorageType -> (string) +>> +>>> The storage type for the DB cluster. +>> +>> AllocatedStorage -> (integer) +>> +>>> The allocated storage size in gibibytes (GiB) for all database engines except Amazon Aurora. For Aurora, `AllocatedStorage` always returns 1, because Aurora DB cluster storage size isn’t fixed, but instead automatically adjusts as needed. +>> +>> RdsCustomClusterConfiguration -> (structure) +>> +>>> Reserved for future use. +>>> +>>> InterconnectSubnetId -> (string) +>>> +>>>> Reserved for future use. +>>> +>>> TransitGatewayMulticastDomainId -> (string) +>>> +>>>> Reserved for future use. +>>> +>>> ReplicaMode -> (string) +>>> +>>>> Reserved for future use. +>>>> +>>>> Possible values: