AWS cli documentation change
Summary
Updated CLI version reference from 2.31.3 to 2.31.5, reordered parameters, added storage throughput documentation, restructured IAM instance profile and network type parameters, updated DBInstance structure fields including security-related IAM authentication and certificate details
Security assessment
The changes include updates to IAM instance profile requirements and IAM database authentication documentation, which are security-related features. However, there is no evidence these changes address a specific security vulnerability or incident. The modifications appear to be documentation restructuring and clarification of existing security controls.
Diff
diff --git a/cli/latest/reference/rds/restore-db-instance-from-db-snapshot.md b/cli/latest/reference/rds/restore-db-instance-from-db-snapshot.md index a18c54a3e..e668a79da 100644 --- a//cli/latest/reference/rds/restore-db-instance-from-db-snapshot.md +++ b//cli/latest/reference/rds/restore-db-instance-from-db-snapshot.md @@ -15 +15 @@ - * [AWS CLI 2.31.3 Command Reference](../../index.html) » + * [AWS CLI 2.31.5 Command Reference](../../index.html) » @@ -90,0 +91 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rds-20 + [--storage-throughput <value>] @@ -111,2 +111,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rds-20 - [--custom-iam-instance-profile <value>] - [--backup-target <value>] @@ -114,2 +113,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rds-20 - [--storage-throughput <value>] - [--db-cluster-snapshot-identifier <value>] + [--backup-target <value>] + [--custom-iam-instance-profile <value>] @@ -116,0 +116 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rds-20 + [--db-cluster-snapshot-identifier <value>] @@ -299,0 +300,6 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rds-20 +`--storage-throughput` (integer) + +> Specifies the storage throughput value for the DB instance. +> +> This setting doesn’t apply to RDS Custom or Amazon Aurora. + @@ -590 +596 @@ JSON Syntax: -`--custom-iam-instance-profile` (string) +`--network-type` (string) @@ -592 +598 @@ JSON Syntax: -> The instance profile associated with the underlying Amazon EC2 instance of an RDS Custom DB instance. The instance profile must meet the following requirements: +> The network type of the DB instance. @@ -594,3 +600,4 @@ JSON Syntax: -> * The profile must exist in your account. -> * The profile must have an IAM role that Amazon EC2 has permissions to assume. -> * The instance profile name and the associated IAM role name must start with the prefix `AWSRDSCustom` . +> Valid Values: +> +> * `IPV4` +> * `DUAL` @@ -600 +607 @@ JSON Syntax: -> For the list of permissions required for the IAM role, see [Configure IAM and your VPC](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/custom-setup-orcl.html#custom-setup-orcl.iam-vpc) in the _Amazon RDS User Guide_ . +> The network type is determined by the `DBSubnetGroup` specified for the DB instance. A `DBSubnetGroup` can support only the IPv4 protocol or the IPv4 and the IPv6 protocols (`DUAL` ). @@ -602 +609 @@ JSON Syntax: -> This setting is required for RDS Custom. +> For more information, see [Working with a DB instance in a VPC](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_VPC.WorkingWithRDSInstanceinaVPC.html) in the _Amazon RDS User Guide._ @@ -612 +619 @@ JSON Syntax: -`--network-type` (string) +`--custom-iam-instance-profile` (string) @@ -614,3 +621 @@ JSON Syntax: -> The network type of the DB instance. -> -> Valid Values: +> The instance profile associated with the underlying Amazon EC2 instance of an RDS Custom DB instance. The instance profile must meet the following requirements: @@ -618,2 +623,3 @@ JSON Syntax: -> * `IPV4` -> * `DUAL` +> * The profile must exist in your account. +> * The profile must have an IAM role that Amazon EC2 has permissions to assume. +> * The instance profile name and the associated IAM role name must start with the prefix `AWSRDSCustom` . @@ -623 +629 @@ JSON Syntax: -> The network type is determined by the `DBSubnetGroup` specified for the DB instance. A `DBSubnetGroup` can support only the IPv4 protocol or the IPv4 and the IPv6 protocols (`DUAL` ). +> For the list of permissions required for the IAM role, see [Configure IAM and your VPC](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/custom-setup-orcl.html#custom-setup-orcl.iam-vpc) in the _Amazon RDS User Guide_ . @@ -625 +631 @@ JSON Syntax: -> For more information, see [Working with a DB instance in a VPC](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_VPC.WorkingWithRDSInstanceinaVPC.html) in the _Amazon RDS User Guide._ +> This setting is required for RDS Custom. @@ -627 +633 @@ JSON Syntax: -`--storage-throughput` (integer) +`--allocated-storage` (integer) @@ -629 +635 @@ JSON Syntax: -> Specifies the storage throughput value for the DB instance. +> The amount of storage (in gibibytes) to allocate initially for the DB instance. Follow the allocation rules specified in CreateDBInstance. @@ -631 +637,5 @@ JSON Syntax: -> This setting doesn’t apply to RDS Custom or Amazon Aurora. +> This setting isn’t valid for RDS for SQL Server. +> +> ### Note +> +> Be sure to allocate enough storage for your new DB instance so that the restore operation can succeed. You can also allocate additional storage for future growth. @@ -649,10 +658,0 @@ JSON Syntax: -`--allocated-storage` (integer) - -> The amount of storage (in gibibytes) to allocate initially for the DB instance. Follow the allocation rules specified in CreateDBInstance. -> -> This setting isn’t valid for RDS for SQL Server. -> -> ### Note -> -> Be sure to allocate enough storage for your new DB instance so that the restore operation can succeed. You can also allocate additional storage for future growth. - @@ -886,4 +885,0 @@ DBInstance -> (structure) -> AutomaticRestartTime -> (timestamp) -> ->> The time when a stopped DB instance is restarted automatically. -> @@ -1136,0 +1133,4 @@ DBInstance -> (structure) +>> StorageThroughput -> (integer) +>> +>>> The storage throughput of the DB instance. +>> @@ -1219,4 +1218,0 @@ DBInstance -> (structure) ->> IAMDatabaseAuthenticationEnabled -> (boolean) ->> ->>> Indicates whether mapping of Amazon Web Services Identity and Access Management (IAM) accounts to database accounts is enabled. ->> @@ -1238 +1234 @@ DBInstance -> (structure) ->> StorageThroughput -> (integer) +>> MultiTenant -> (boolean) @@ -1240 +1236 @@ DBInstance -> (structure) ->>> The storage throughput of the DB instance. +>>> Indicates whether the DB instance will change to the multi-tenant configuration (TRUE) or the single-tenant configuration (FALSE). @@ -1242 +1238 @@ DBInstance -> (structure) ->> Engine -> (string) +>> IAMDatabaseAuthenticationEnabled -> (boolean) @@ -1244 +1240 @@ DBInstance -> (structure) ->>> The database engine of the DB instance. +>>> Indicates whether mapping of Amazon Web Services Identity and Access Management (IAM) accounts to database accounts is enabled. @@ -1250 +1246 @@ DBInstance -> (structure) ->> MultiTenant -> (boolean) +>> Engine -> (string) @@ -1252 +1248 @@ DBInstance -> (structure) ->>> Indicates whether the DB instance will change to the multi-tenant configuration (TRUE) or the single-tenant configuration (FALSE). +>>> The database engine of the DB instance. @@ -1314,0 +1311,6 @@ DBInstance -> (structure) +> StorageThroughput -> (integer) +> +>> The storage throughput for the DB instance. +>> +>> This setting applies only to the `gp3` storage type. +> @@ -1648 +1650 @@ DBInstance -> (structure) -> DBInstanceAutomatedBackupsReplications -> (list) +> AutomationMode -> (string) @@ -1650 +1652 @@ DBInstance -> (structure) ->> The list of replicated automated backups associated with the DB instance. +>> The automation mode of the RDS Custom DB instance: `full` or `all paused` . If `full` , the DB instance automates monitoring and instance recovery. If `all paused` , the instance pauses automation for the duration set by `--resume-full-automation-mode-minutes` . @@ -1652 +1654 @@ DBInstance -> (structure) ->> (structure) +>> Possible values: @@ -1654,5 +1656,8 @@ DBInstance -> (structure) ->>> Automated backups of a DB instance replicated to another Amazon Web Services Region. They consist of system backups, transaction logs, and database instance properties. ->>> ->>> DBInstanceAutomatedBackupsArn -> (string) ->>> ->>>> The Amazon Resource Name (ARN) of the replicated automated backups. +>> * `full` +>> * `all-paused` +>> + +> +> ResumeFullAutomationModeTime -> (timestamp) +> +>> The number of minutes to pause the automation. When the time period ends, RDS Custom resumes full automation. The minimum value is 60 (default). The maximum value is 1,440. @@ -1670 +1675 @@ DBInstance -> (structure) -> AwsBackupRecoveryPointArn -> (string) +> NetworkType -> (string) @@ -1672 +1677,7 @@ DBInstance -> (structure) ->> The Amazon Resource Name (ARN) of the recovery point in Amazon Web Services Backup. +>> The network type of the DB instance. +>> +>> The network type is determined by the `DBSubnetGroup` specified for the DB instance. A `DBSubnetGroup` can support only the IPv4 protocol or the IPv4 and the IPv6 protocols (`DUAL` ). +>> +>> For more information, see [Working with a DB instance in a VPC](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_VPC.WorkingWithRDSInstanceinaVPC.html) in the _Amazon RDS User Guide_ and [Working with a DB instance in a VPC](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_VPC.WorkingWithRDSInstanceinaVPC.html) in the _Amazon Aurora User Guide._ +>> +>> Valid Values: `IPV4 | DUAL` @@ -1710 +1721 @@ DBInstance -> (structure) -> AutomationMode -> (string) +> AwsBackupRecoveryPointArn -> (string) @@ -1712,3 +1723,5 @@ DBInstance -> (structure) ->> The automation mode of the RDS Custom DB instance: `full` or `all paused` . If `full` , the DB instance automates monitoring and instance recovery. If `all paused` , the instance pauses automation for the duration set by `--resume-full-automation-mode-minutes` . ->> ->> Possible values: +>> The Amazon Resource Name (ARN) of the recovery point in Amazon Web Services Backup. +> +> DBInstanceAutomatedBackupsReplications -> (list) +> +>> The list of replicated automated backups associated with the DB instance. @@ -1716,2 +1729 @@ DBInstance -> (structure) ->> * `full` ->> * `all-paused` +>> (structure) @@ -1719 +1731,5 @@ DBInstance -> (structure) - +>>> Automated backups of a DB instance replicated to another Amazon Web Services Region. They consist of system backups, transaction logs, and database instance properties. +>>> +>>> DBInstanceAutomatedBackupsArn -> (string) +>>> +>>>> The Amazon Resource Name (ARN) of the replicated automated backups. @@ -1721 +1737 @@ DBInstance -> (structure) -> ResumeFullAutomationModeTime -> (timestamp) +> BackupTarget -> (string) @@ -1723 +1739,5 @@ DBInstance -> (structure) ->> The number of minutes to pause the automation. When the time period ends, RDS Custom resumes full automation. The minimum value is 60 (default). The maximum value is 1,440. +>> The location where automated backups and manual snapshots are stored: Dedicated Local Zones, Amazon Web Services Outposts or the Amazon Web Services Region. +> +> AutomaticRestartTime -> (timestamp) +> +>> The time when a stopped DB instance is restarted automatically. @@ -1737,14 +1756,0 @@ DBInstance -> (structure) -> BackupTarget -> (string)