AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2025-10-01 · Documentation low

File: cli/latest/reference/rds/modify-db-instance.md

Summary

Updated AWS CLI version reference, reordered parameters, added storage-throughput documentation, moved security-related flags like disable-domain and enable-customer-owned-ip, added multi-tenant configuration warning, and reorganized response fields

Security assessment

Changes include parameter reordering and documentation updates but no explicit security vulnerability fixes. The --disable-domain flag relates to Active Directory integration (security configuration) but only moves its position. Multi-tenant warning emphasizes irreversible configuration but doesn't address a specific vulnerability.

Diff

diff --git a/cli/latest/reference/rds/modify-db-instance.md b/cli/latest/reference/rds/modify-db-instance.md
index 9190f9c72..247423929 100644
--- a//cli/latest/reference/rds/modify-db-instance.md
+++ b//cli/latest/reference/rds/modify-db-instance.md
@@ -15 +15 @@
-  * [AWS CLI 2.31.3 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.5 Command Reference](../../index.html) »
@@ -85,0 +86 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rds-20
+    [--storage-throughput <value>]
@@ -96,0 +98 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rds-20
+    [--disable-domain | --no-disable-domain]
@@ -103 +104,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rds-20
-    [--disable-domain | --no-disable-domain]
@@ -117,2 +117,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rds-20
-    [--enable-customer-owned-ip | --no-enable-customer-owned-ip]
-    [--aws-backup-recovery-point-arn <value>]
@@ -120,0 +120 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rds-20
+    [--enable-customer-owned-ip | --no-enable-customer-owned-ip]
@@ -122 +122 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rds-20
-    [--storage-throughput <value>]
+    [--aws-backup-recovery-point-arn <value>]
@@ -126,2 +125,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rds-20
-    [--engine <value>]
-    [--dedicated-log-volume | --no-dedicated-log-volume]
@@ -128,0 +127,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rds-20
+    [--dedicated-log-volume | --no-dedicated-log-volume]
+    [--engine <value>]
@@ -453,0 +454,8 @@ Syntax:
+`--storage-throughput` (integer)
+
+> The storage throughput value for the DB instance.
+> 
+> This setting applies only to the `gp3` storage type.
+> 
+> This setting doesn’t apply to Amazon Aurora or RDS Custom DB instances.
+
@@ -572,0 +581,4 @@ Syntax:
+`--disable-domain` | `--no-disable-domain` (boolean)
+
+> Specifies whether to remove the DB instance from the Active Directory domain.
+
@@ -647,4 +658,0 @@ Syntax:
-`--disable-domain` | `--no-disable-domain` (boolean)
-
-> Specifies whether to remove the DB instance from the Active Directory domain.
-
@@ -924,24 +931,0 @@ JSON Syntax:
-`--enable-customer-owned-ip` | `--no-enable-customer-owned-ip` (boolean)
-
-> Specifies whether to enable a customer-owned IP address (CoIP) for an RDS on Outposts DB instance.
-> 
-> A _CoIP_ provides local or external connectivity to resources in your Outpost subnets through your on-premises network. For some use cases, a CoIP can provide lower latency for connections to the DB instance from outside of its virtual private cloud (VPC) on your local network.
-> 
-> For more information about RDS on Outposts, see [Working with Amazon RDS on Amazon Web Services Outposts](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-on-outposts.html) in the _Amazon RDS User Guide_ .
-> 
-> For more information about CoIPs, see [Customer-owned IP addresses](https://docs.aws.amazon.com/outposts/latest/userguide/routing.html#ip-addressing) in the _Amazon Web Services Outposts User Guide_ .
-
-`--aws-backup-recovery-point-arn` (string)
-
-> The Amazon Resource Name (ARN) of the recovery point in Amazon Web Services Backup.
-> 
-> This setting doesn’t apply to RDS Custom DB instances.
-> 
-> Constraints:
-> 
->   * min: `43`
->   * max: `350`
->   * pattern: `^arn:aws[a-z-]*:backup:[-a-z0-9]+:[0-9]{12}:[-a-z]+:([a-z0-9\-]+:)?[a-z][a-z0-9\-]{0,255}$`
-> 
-
-
@@ -971,0 +956,10 @@ JSON Syntax:
+`--enable-customer-owned-ip` | `--no-enable-customer-owned-ip` (boolean)
+
+> Specifies whether to enable a customer-owned IP address (CoIP) for an RDS on Outposts DB instance.
+> 
+> A _CoIP_ provides local or external connectivity to resources in your Outpost subnets through your on-premises network. For some use cases, a CoIP can provide lower latency for connections to the DB instance from outside of its virtual private cloud (VPC) on your local network.
+> 
+> For more information about RDS on Outposts, see [Working with Amazon RDS on Amazon Web Services Outposts](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-on-outposts.html) in the _Amazon RDS User Guide_ .
+> 
+> For more information about CoIPs, see [Customer-owned IP addresses](https://docs.aws.amazon.com/outposts/latest/userguide/routing.html#ip-addressing) in the _Amazon Web Services Outposts User Guide_ .
+
@@ -982 +976 @@ JSON Syntax:
-`--storage-throughput` (integer)
+`--aws-backup-recovery-point-arn` (string)
@@ -984 +978 @@ JSON Syntax:
-> The storage throughput value for the DB instance.
+> The Amazon Resource Name (ARN) of the recovery point in Amazon Web Services Backup.
@@ -986 +980 @@ JSON Syntax:
-> This setting applies only to the `gp3` storage type.
+> This setting doesn’t apply to RDS Custom DB instances.
@@ -988 +982,7 @@ JSON Syntax:
-> This setting doesn’t apply to Amazon Aurora or RDS Custom DB instances.
+> Constraints:
+> 
+>   * min: `43`
+>   * max: `350`
+>   * pattern: `^arn:aws[a-z-]*:backup:[-a-z0-9]+:[0-9]{12}:[-a-z]+:([a-z0-9\-]+:)?[a-z][a-z0-9\-]{0,255}$`
+> 
+
@@ -1036,0 +1037,14 @@ JSON Syntax:
+`--multi-tenant` | `--no-multi-tenant` (boolean)
+
+> Specifies whether the to convert your DB instance from the single-tenant configuration to the multi-tenant configuration. This parameter is supported only for RDS for Oracle CDB instances.
+> 
+> During the conversion, RDS creates an initial tenant database and associates the DB name, master user name, character set, and national character set metadata with this database. The tags associated with the instance also propagate to the initial tenant database. You can add more tenant databases to your DB instance by using the `CreateTenantDatabase` operation.
+> 
+> ### Warning
+> 
+> The conversion to the multi-tenant configuration is permanent and irreversible, so you can’t later convert back to the single-tenant configuration. When you specify this parameter, you must also specify `ApplyImmediately` .
+
+`--dedicated-log-volume` | `--no-dedicated-log-volume` (boolean)
+
+> Indicates whether the DB instance has a dedicated log volume (DLV) enabled.
+
@@ -1057,14 +1070,0 @@ JSON Syntax:
-`--dedicated-log-volume` | `--no-dedicated-log-volume` (boolean)
-
-> Indicates whether the DB instance has a dedicated log volume (DLV) enabled.
-
-`--multi-tenant` | `--no-multi-tenant` (boolean)
-
-> Specifies whether the to convert your DB instance from the single-tenant configuration to the multi-tenant configuration. This parameter is supported only for RDS for Oracle CDB instances.
-> 
-> During the conversion, RDS creates an initial tenant database and associates the DB name, master user name, character set, and national character set metadata with this database. The tags associated with the instance also propagate to the initial tenant database. You can add more tenant databases to your DB instance by using the `CreateTenantDatabase` operation.
-> 
-> ### Warning
-> 
-> The conversion to the multi-tenant configuration is permanent and irreversible, so you can’t later convert back to the single-tenant configuration. When you specify this parameter, you must also specify `ApplyImmediately` .
-
@@ -1333,4 +1332,0 @@ DBInstance -> (structure)
-> AutomaticRestartTime -> (timestamp)
->
->> The time when a stopped DB instance is restarted automatically.
-> 
@@ -1583,0 +1580,4 @@ DBInstance -> (structure)
+>> StorageThroughput -> (integer)
+>>
+>>> The storage throughput of the DB instance.
+>> 
@@ -1666,4 +1665,0 @@ DBInstance -> (structure)
->> IAMDatabaseAuthenticationEnabled -> (boolean)
->>
->>> Indicates whether mapping of Amazon Web Services Identity and Access Management (IAM) accounts to database accounts is enabled.
->> 
@@ -1685 +1681 @@ DBInstance -> (structure)
->> StorageThroughput -> (integer)
+>> MultiTenant -> (boolean)
@@ -1687 +1683 @@ DBInstance -> (structure)
->>> The storage throughput of the DB instance.
+>>> Indicates whether the DB instance will change to the multi-tenant configuration (TRUE) or the single-tenant configuration (FALSE).
@@ -1689 +1685 @@ DBInstance -> (structure)
->> Engine -> (string)
+>> IAMDatabaseAuthenticationEnabled -> (boolean)
@@ -1691 +1687 @@ DBInstance -> (structure)
->>> The database engine of the DB instance.
+>>> Indicates whether mapping of Amazon Web Services Identity and Access Management (IAM) accounts to database accounts is enabled.
@@ -1697 +1693 @@ DBInstance -> (structure)
->> MultiTenant -> (boolean)
+>> Engine -> (string)
@@ -1699 +1695 @@ DBInstance -> (structure)
->>> Indicates whether the DB instance will change to the multi-tenant configuration (TRUE) or the single-tenant configuration (FALSE).
+>>> The database engine of the DB instance.
@@ -1761,0 +1758,6 @@ DBInstance -> (structure)
+> StorageThroughput -> (integer)
+>
+>> The storage throughput for the DB instance.
+>> 
+>> This setting applies only to the `gp3` storage type.
+> 
@@ -2095 +2097 @@ DBInstance -> (structure)
-> DBInstanceAutomatedBackupsReplications -> (list)
+> AutomationMode -> (string)
@@ -2097 +2099 @@ DBInstance -> (structure)
->> The list of replicated automated backups associated with the DB instance.
+>> The automation mode of the RDS Custom DB instance: `full` or `all paused` . If `full` , the DB instance automates monitoring and instance recovery. If `all paused` , the instance pauses automation for the duration set by `--resume-full-automation-mode-minutes` .
@@ -2099 +2101 @@ DBInstance -> (structure)
->> (structure)
+>> Possible values:
@@ -2101,5 +2103,8 @@ DBInstance -> (structure)
->>> Automated backups of a DB instance replicated to another Amazon Web Services Region. They consist of system backups, transaction logs, and database instance properties.
->>> 
->>> DBInstanceAutomatedBackupsArn -> (string)
->>>
->>>> The Amazon Resource Name (ARN) of the replicated automated backups.
+>>   * `full`
+>>   * `all-paused`
+>> 
+
+> 
+> ResumeFullAutomationModeTime -> (timestamp)
+>
+>> The number of minutes to pause the automation. When the time period ends, RDS Custom resumes full automation. The minimum value is 60 (default). The maximum value is 1,440.
@@ -2117 +2122 @@ DBInstance -> (structure)
-> AwsBackupRecoveryPointArn -> (string)
+> NetworkType -> (string)
@@ -2119 +2124,7 @@ DBInstance -> (structure)
->> The Amazon Resource Name (ARN) of the recovery point in Amazon Web Services Backup.
+>> The network type of the DB instance.
+>>