AWS cli documentation change
Summary
Updated AWS CLI version reference from 2.31.3 to 2.31.5, reordered parameters, added --storage-throughput documentation, restructured parameter descriptions (e.g., --custom-iam-instance-profile, --network-type), and updated JSON syntax/output fields related to storage throughput, IAM authentication, multi-tenancy, and certificate details.
Security assessment
The changes primarily involve documentation restructuring, parameter reordering, and clarifications (e.g., IAM role requirements for custom instances). While IAM and certificate details are security-adjacent, there is no explicit evidence of addressing a specific vulnerability or introducing new security features. The --custom-iam-instance-profile changes describe existing requirements rather than new security controls.
Diff
diff --git a/cli/latest/reference/rds/restore-db-instance-to-point-in-time.md b/cli/latest/reference/rds/restore-db-instance-to-point-in-time.md index ff51994f9..a1e88031e 100644 --- a//cli/latest/reference/rds/restore-db-instance-to-point-in-time.md +++ b//cli/latest/reference/rds/restore-db-instance-to-point-in-time.md @@ -15 +15 @@ - * [AWS CLI 2.31.3 Command Reference](../../index.html) » + * [AWS CLI 2.31.5 Command Reference](../../index.html) » @@ -88,0 +89 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rds-20 + [--storage-throughput <value>] @@ -110 +110,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rds-20 - [--source-db-instance-automated-backups-arn <value>] @@ -112,2 +111,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rds-20 - [--custom-iam-instance-profile <value>] - [--backup-target <value>] @@ -115 +113,3 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rds-20 - [--storage-throughput <value>] + [--source-db-instance-automated-backups-arn <value>] + [--backup-target <value>] + [--custom-iam-instance-profile <value>] @@ -345,0 +346,6 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rds-20 +`--storage-throughput` (integer) + +> The storage throughput value for the DB instance. +> +> This setting doesn’t apply to RDS Custom or Amazon Aurora. + @@ -636,6 +641,0 @@ JSON Syntax: -`--source-db-instance-automated-backups-arn` (string) - -> The Amazon Resource Name (ARN) of the replicated automated backups from which to restore, for example, `arn:aws:rds:us-east-1:123456789012:auto-backup:ab-L2IJCEXJP7XQ7HOJ4SIEXAMPLE` . -> -> This setting doesn’t apply to RDS Custom. - @@ -654 +654 @@ JSON Syntax: -`--custom-iam-instance-profile` (string) +`--network-type` (string) @@ -656 +656 @@ JSON Syntax: -> The instance profile associated with the underlying Amazon EC2 instance of an RDS Custom DB instance. The instance profile must meet the following requirements: +> The network type of the DB instance. @@ -658,3 +658 @@ JSON Syntax: -> * The profile must exist in your account. -> * The profile must have an IAM role that Amazon EC2 has permissions to assume. -> * The instance profile name and the associated IAM role name must start with the prefix `AWSRDSCustom` . +> The network type is determined by the `DBSubnetGroup` specified for the DB instance. A `DBSubnetGroup` can support only the IPv4 protocol or the IPv4 and the IPv6 protocols (`DUAL` ). @@ -662 +660 @@ JSON Syntax: - +> For more information, see [Working with a DB instance in a VPC](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_VPC.WorkingWithRDSInstanceinaVPC.html) in the _Amazon RDS User Guide._ @@ -664 +662 @@ JSON Syntax: -> For the list of permissions required for the IAM role, see [Configure IAM and your VPC](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/custom-setup-orcl.html#custom-setup-orcl.iam-vpc) in the _Amazon RDS User Guide_ . +> Valid Values: @@ -666 +664,10 @@ JSON Syntax: -> This setting is required for RDS Custom. +> * `IPV4` +> * `DUAL` +> + + +`--source-db-instance-automated-backups-arn` (string) + +> The Amazon Resource Name (ARN) of the replicated automated backups from which to restore, for example, `arn:aws:rds:us-east-1:123456789012:auto-backup:ab-L2IJCEXJP7XQ7HOJ4SIEXAMPLE` . +> +> This setting doesn’t apply to RDS Custom. @@ -684 +691 @@ JSON Syntax: -`--network-type` (string) +`--custom-iam-instance-profile` (string) @@ -686,7 +693 @@ JSON Syntax: -> The network type of the DB instance. -> -> The network type is determined by the `DBSubnetGroup` specified for the DB instance. A `DBSubnetGroup` can support only the IPv4 protocol or the IPv4 and the IPv6 protocols (`DUAL` ). -> -> For more information, see [Working with a DB instance in a VPC](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_VPC.WorkingWithRDSInstanceinaVPC.html) in the _Amazon RDS User Guide._ -> -> Valid Values: +> The instance profile associated with the underlying Amazon EC2 instance of an RDS Custom DB instance. The instance profile must meet the following requirements: @@ -694,2 +695,3 @@ JSON Syntax: -> * `IPV4` -> * `DUAL` +> * The profile must exist in your account. +> * The profile must have an IAM role that Amazon EC2 has permissions to assume. +> * The instance profile name and the associated IAM role name must start with the prefix `AWSRDSCustom` . @@ -698,4 +699,0 @@ JSON Syntax: - -`--storage-throughput` (integer) - -> The storage throughput value for the DB instance. @@ -703 +701,3 @@ JSON Syntax: -> This setting doesn’t apply to RDS Custom or Amazon Aurora. +> For the list of permissions required for the IAM role, see [Configure IAM and your VPC](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/custom-setup-orcl.html#custom-setup-orcl.iam-vpc) in the _Amazon RDS User Guide_ . +> +> This setting is required for RDS Custom. @@ -968,4 +967,0 @@ DBInstance -> (structure) -> AutomaticRestartTime -> (timestamp) -> ->> The time when a stopped DB instance is restarted automatically. -> @@ -1218,0 +1215,4 @@ DBInstance -> (structure) +>> StorageThroughput -> (integer) +>> +>>> The storage throughput of the DB instance. +>> @@ -1301,4 +1300,0 @@ DBInstance -> (structure) ->> IAMDatabaseAuthenticationEnabled -> (boolean) ->> ->>> Indicates whether mapping of Amazon Web Services Identity and Access Management (IAM) accounts to database accounts is enabled. ->> @@ -1320 +1316 @@ DBInstance -> (structure) ->> StorageThroughput -> (integer) +>> MultiTenant -> (boolean) @@ -1322 +1318 @@ DBInstance -> (structure) ->>> The storage throughput of the DB instance. +>>> Indicates whether the DB instance will change to the multi-tenant configuration (TRUE) or the single-tenant configuration (FALSE). @@ -1324 +1320 @@ DBInstance -> (structure) ->> Engine -> (string) +>> IAMDatabaseAuthenticationEnabled -> (boolean) @@ -1326 +1322 @@ DBInstance -> (structure) ->>> The database engine of the DB instance. +>>> Indicates whether mapping of Amazon Web Services Identity and Access Management (IAM) accounts to database accounts is enabled. @@ -1332 +1328 @@ DBInstance -> (structure) ->> MultiTenant -> (boolean) +>> Engine -> (string) @@ -1334 +1330 @@ DBInstance -> (structure) ->>> Indicates whether the DB instance will change to the multi-tenant configuration (TRUE) or the single-tenant configuration (FALSE). +>>> The database engine of the DB instance. @@ -1396,0 +1393,6 @@ DBInstance -> (structure) +> StorageThroughput -> (integer) +> +>> The storage throughput for the DB instance. +>> +>> This setting applies only to the `gp3` storage type. +> @@ -1730 +1732 @@ DBInstance -> (structure) -> DBInstanceAutomatedBackupsReplications -> (list) +> AutomationMode -> (string) @@ -1732 +1734 @@ DBInstance -> (structure) ->> The list of replicated automated backups associated with the DB instance. +>> The automation mode of the RDS Custom DB instance: `full` or `all paused` . If `full` , the DB instance automates monitoring and instance recovery. If `all paused` , the instance pauses automation for the duration set by `--resume-full-automation-mode-minutes` . @@ -1734 +1736 @@ DBInstance -> (structure) ->> (structure) +>> Possible values: @@ -1736,5 +1738,8 @@ DBInstance -> (structure) ->>> Automated backups of a DB instance replicated to another Amazon Web Services Region. They consist of system backups, transaction logs, and database instance properties. ->>> ->>> DBInstanceAutomatedBackupsArn -> (string) ->>> ->>>> The Amazon Resource Name (ARN) of the replicated automated backups. +>> * `full` +>> * `all-paused` +>> + +> +> ResumeFullAutomationModeTime -> (timestamp) +> +>> The number of minutes to pause the automation. When the time period ends, RDS Custom resumes full automation. The minimum value is 60 (default). The maximum value is 1,440. @@ -1752 +1757 @@ DBInstance -> (structure) -> AwsBackupRecoveryPointArn -> (string) +> NetworkType -> (string) @@ -1754 +1759,7 @@ DBInstance -> (structure) ->> The Amazon Resource Name (ARN) of the recovery point in Amazon Web Services Backup. +>> The network type of the DB instance. +>> +>> The network type is determined by the `DBSubnetGroup` specified for the DB instance. A `DBSubnetGroup` can support only the IPv4 protocol or the IPv4 and the IPv6 protocols (`DUAL` ). +>> +>> For more information, see [Working with a DB instance in a VPC](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_VPC.WorkingWithRDSInstanceinaVPC.html) in the _Amazon RDS User Guide_ and [Working with a DB instance in a VPC](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_VPC.WorkingWithRDSInstanceinaVPC.html) in the _Amazon Aurora User Guide._ +>> +>> Valid Values: `IPV4 | DUAL` @@ -1792 +1803 @@ DBInstance -> (structure) -> AutomationMode -> (string) +> AwsBackupRecoveryPointArn -> (string) @@ -1794,3 +1805,5 @@ DBInstance -> (structure) ->> The automation mode of the RDS Custom DB instance: `full` or `all paused` . If `full` , the DB instance automates monitoring and instance recovery. If `all paused` , the instance pauses automation for the duration set by `--resume-full-automation-mode-minutes` . ->> ->> Possible values: +>> The Amazon Resource Name (ARN) of the recovery point in Amazon Web Services Backup. +> +> DBInstanceAutomatedBackupsReplications -> (list) +> +>> The list of replicated automated backups associated with the DB instance. @@ -1798,2 +1811 @@ DBInstance -> (structure) ->> * `full` ->> * `all-paused` +>> (structure) @@ -1801 +1813,5 @@ DBInstance -> (structure) - +>>> Automated backups of a DB instance replicated to another Amazon Web Services Region. They consist of system backups, transaction logs, and database instance properties. +>>> +>>> DBInstanceAutomatedBackupsArn -> (string) +>>> +>>>> The Amazon Resource Name (ARN) of the replicated automated backups. @@ -1803 +1819 @@ DBInstance -> (structure) -> ResumeFullAutomationModeTime -> (timestamp) +> BackupTarget -> (string) @@ -1805 +1821,5 @@ DBInstance -> (structure) ->> The number of minutes to pause the automation. When the time period ends, RDS Custom resumes full automation. The minimum value is 60 (default). The maximum value is 1,440. +>> The location where automated backups and manual snapshots are stored: Dedicated Local Zones, Amazon Web Services Outposts or the Amazon Web Services Region. +> +> AutomaticRestartTime -> (timestamp) +> +>> The time when a stopped DB instance is restarted automatically. @@ -1819,14 +1838,0 @@ DBInstance -> (structure) -> BackupTarget -> (string)