AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2025-10-01 · Documentation low

File: cli/latest/reference/rds/promote-read-replica.md

Summary

Updated CLI reference version from 2.31.3 to 2.31.5; Reorganized DBInstance structure documentation including moving/reordering fields (StorageThroughput, IAMDatabaseAuthenticationEnabled, MultiTenant), added network type details, updated automation mode documentation, and adjusted certificate details section

Security assessment

No explicit security vulnerabilities or incidents are mentioned. Changes primarily reorganize existing fields and update operational parameters. The IAMDatabaseAuthenticationEnabled field was moved but not modified in functionality - it maintains existing security documentation rather than adding new security features. CertificateDetails section was relocated without substantive security content changes.

Diff

diff --git a/cli/latest/reference/rds/promote-read-replica.md b/cli/latest/reference/rds/promote-read-replica.md
index 41b08afb3..5f3476d8e 100644
--- a//cli/latest/reference/rds/promote-read-replica.md
+++ b//cli/latest/reference/rds/promote-read-replica.md
@@ -15 +15 @@
-  * [AWS CLI 2.31.3 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.5 Command Reference](../../index.html) »
@@ -296,4 +295,0 @@ DBInstance -> (structure)
-> AutomaticRestartTime -> (timestamp)
->
->> The time when a stopped DB instance is restarted automatically.
-> 
@@ -546,0 +543,4 @@ DBInstance -> (structure)
+>> StorageThroughput -> (integer)
+>>
+>>> The storage throughput of the DB instance.
+>> 
@@ -629,4 +628,0 @@ DBInstance -> (structure)
->> IAMDatabaseAuthenticationEnabled -> (boolean)
->>
->>> Indicates whether mapping of Amazon Web Services Identity and Access Management (IAM) accounts to database accounts is enabled.
->> 
@@ -648 +644 @@ DBInstance -> (structure)
->> StorageThroughput -> (integer)
+>> MultiTenant -> (boolean)
@@ -650 +646 @@ DBInstance -> (structure)
->>> The storage throughput of the DB instance.
+>>> Indicates whether the DB instance will change to the multi-tenant configuration (TRUE) or the single-tenant configuration (FALSE).
@@ -652 +648 @@ DBInstance -> (structure)
->> Engine -> (string)
+>> IAMDatabaseAuthenticationEnabled -> (boolean)
@@ -654 +650 @@ DBInstance -> (structure)
->>> The database engine of the DB instance.
+>>> Indicates whether mapping of Amazon Web Services Identity and Access Management (IAM) accounts to database accounts is enabled.
@@ -660 +656 @@ DBInstance -> (structure)
->> MultiTenant -> (boolean)
+>> Engine -> (string)
@@ -662 +658 @@ DBInstance -> (structure)
->>> Indicates whether the DB instance will change to the multi-tenant configuration (TRUE) or the single-tenant configuration (FALSE).
+>>> The database engine of the DB instance.
@@ -724,0 +721,6 @@ DBInstance -> (structure)
+> StorageThroughput -> (integer)
+>
+>> The storage throughput for the DB instance.
+>> 
+>> This setting applies only to the `gp3` storage type.
+> 
@@ -1058 +1060 @@ DBInstance -> (structure)
-> DBInstanceAutomatedBackupsReplications -> (list)
+> AutomationMode -> (string)
@@ -1060 +1062 @@ DBInstance -> (structure)
->> The list of replicated automated backups associated with the DB instance.
+>> The automation mode of the RDS Custom DB instance: `full` or `all paused` . If `full` , the DB instance automates monitoring and instance recovery. If `all paused` , the instance pauses automation for the duration set by `--resume-full-automation-mode-minutes` .
@@ -1062 +1064 @@ DBInstance -> (structure)
->> (structure)
+>> Possible values:
@@ -1064,5 +1066,8 @@ DBInstance -> (structure)
->>> Automated backups of a DB instance replicated to another Amazon Web Services Region. They consist of system backups, transaction logs, and database instance properties.
->>> 
->>> DBInstanceAutomatedBackupsArn -> (string)
->>>
->>>> The Amazon Resource Name (ARN) of the replicated automated backups.
+>>   * `full`
+>>   * `all-paused`
+>> 
+
+> 
+> ResumeFullAutomationModeTime -> (timestamp)
+>
+>> The number of minutes to pause the automation. When the time period ends, RDS Custom resumes full automation. The minimum value is 60 (default). The maximum value is 1,440.
@@ -1080 +1085 @@ DBInstance -> (structure)
-> AwsBackupRecoveryPointArn -> (string)
+> NetworkType -> (string)
@@ -1082 +1087,7 @@ DBInstance -> (structure)
->> The Amazon Resource Name (ARN) of the recovery point in Amazon Web Services Backup.
+>> The network type of the DB instance.
+>> 
+>> The network type is determined by the `DBSubnetGroup` specified for the DB instance. A `DBSubnetGroup` can support only the IPv4 protocol or the IPv4 and the IPv6 protocols (`DUAL` ).
+>> 
+>> For more information, see [Working with a DB instance in a VPC](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_VPC.WorkingWithRDSInstanceinaVPC.html) in the _Amazon RDS User Guide_ and [Working with a DB instance in a VPC](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_VPC.WorkingWithRDSInstanceinaVPC.html) in the _Amazon Aurora User Guide._
+>> 
+>> Valid Values: `IPV4 | DUAL`
@@ -1120 +1131 @@ DBInstance -> (structure)
-> AutomationMode -> (string)
+> AwsBackupRecoveryPointArn -> (string)
@@ -1122,3 +1133,5 @@ DBInstance -> (structure)
->> The automation mode of the RDS Custom DB instance: `full` or `all paused` . If `full` , the DB instance automates monitoring and instance recovery. If `all paused` , the instance pauses automation for the duration set by `--resume-full-automation-mode-minutes` .
->> 
->> Possible values:
+>> The Amazon Resource Name (ARN) of the recovery point in Amazon Web Services Backup.
+> 
+> DBInstanceAutomatedBackupsReplications -> (list)
+>
+>> The list of replicated automated backups associated with the DB instance.
@@ -1126,2 +1139 @@ DBInstance -> (structure)
->>   * `full`
->>   * `all-paused`
+>> (structure)
@@ -1129 +1141,5 @@ DBInstance -> (structure)
-
+>>> Automated backups of a DB instance replicated to another Amazon Web Services Region. They consist of system backups, transaction logs, and database instance properties.
+>>> 
+>>> DBInstanceAutomatedBackupsArn -> (string)
+>>>
+>>>> The Amazon Resource Name (ARN) of the replicated automated backups.
@@ -1131 +1147 @@ DBInstance -> (structure)
-> ResumeFullAutomationModeTime -> (timestamp)
+> BackupTarget -> (string)
@@ -1133 +1149,5 @@ DBInstance -> (structure)
->> The number of minutes to pause the automation. When the time period ends, RDS Custom resumes full automation. The minimum value is 60 (default). The maximum value is 1,440.
+>> The location where automated backups and manual snapshots are stored: Dedicated Local Zones, Amazon Web Services Outposts or the Amazon Web Services Region.
+> 
+> AutomaticRestartTime -> (timestamp)
+>
+>> The time when a stopped DB instance is restarted automatically.
@@ -1147,14 +1166,0 @@ DBInstance -> (structure)
-> BackupTarget -> (string)
->
->> The location where automated backups and manual snapshots are stored: Dedicated Local Zones, Amazon Web Services Outposts or the Amazon Web Services Region.
-> 
-> NetworkType -> (string)
->
->> The network type of the DB instance.
->> 
->> The network type is determined by the `DBSubnetGroup` specified for the DB instance. A `DBSubnetGroup` can support only the IPv4 protocol or the IPv4 and the IPv6 protocols (`DUAL` ).
->> 
->> For more information, see [Working with a DB instance in a VPC](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_VPC.WorkingWithRDSInstanceinaVPC.html) in the _Amazon RDS User Guide_ and [Working with a DB instance in a VPC](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_VPC.WorkingWithRDSInstanceinaVPC.html) in the _Amazon Aurora User Guide._
->> 
->> Valid Values: `IPV4 | DUAL`
-> 
@@ -1174 +1180 @@ DBInstance -> (structure)
-> StorageThroughput -> (integer)
+> CertificateDetails -> (structure)
@@ -1176 +1182 @@ DBInstance -> (structure)
->> The storage throughput for the DB instance.
+>> The details of the DB instance’s server certificate.
@@ -1178 +1184,7 @@ DBInstance -> (structure)
->> This setting applies only to the `gp3` storage type.
+>> CAIdentifier -> (string)
+>>
+>>> The CA identifier of the CA certificate used for the DB instance’s server certificate.
+>> 
+>> ValidTill -> (timestamp)
+>>
+>>> The expiration date of the DB instance’s server certificate.
@@ -1211,12 +1222,0 @@ DBInstance -> (structure)
-> CertificateDetails -> (structure)
->
->> The details of the DB instance’s server certificate.
->> 
->> CAIdentifier -> (string)
->>
->>> The CA identifier of the CA certificate used for the DB instance’s server certificate.
->> 
->> ValidTill -> (timestamp)
->>
->>> The expiration date of the DB instance’s server certificate.
-> 
@@ -1230,0 +1231,4 @@ DBInstance -> (structure)
+> MultiTenant -> (boolean)
+>
+>> Specifies whether the DB instance is in the multi-tenant configuration (TRUE) or the single-tenant configuration (FALSE).
+> 
@@ -1239,4 +1242,0 @@ DBInstance -> (structure)
-> MultiTenant -> (boolean)
->
->> Specifies whether the DB instance is in the multi-tenant configuration (TRUE) or the single-tenant configuration (FALSE).
-> 
@@ -1259 +1259 @@ DBInstance -> (structure)
-  * [AWS CLI 2.31.3 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.5 Command Reference](../../index.html) »