AWS cli documentation change
Summary
Added detailed TLS configuration options and FIPS compliance requirements for DocumentDB engine defaults
Security assessment
Expands documentation of secure TLS settings and FIPS standards in engine defaults, improving security guidance without evidence of addressing a specific vulnerability.
Diff
diff --git a/cli/latest/reference/docdb/describe-engine-default-cluster-parameters.md b/cli/latest/reference/docdb/describe-engine-default-cluster-parameters.md index 803d7de4c..2da8a344c 100644 --- a//cli/latest/reference/docdb/describe-engine-default-cluster-parameters.md +++ b//cli/latest/reference/docdb/describe-engine-default-cluster-parameters.md @@ -15 +15 @@ - * [AWS CLI 2.31.13 Command Reference](../../index.html) » + * [AWS CLI 2.31.16 Command Reference](../../index.html) » @@ -339 +339,11 @@ EngineDefaults -> (structure) ->>>> Specifies the value of the parameter. +>>>> Specifies the value of the parameter. Must be one or more of the cluster parameter’s `AllowedValues` in CSV format: +>>>> +>>>> Valid values are: +>>>> +>>>> * `enabled` : The cluster accepts secure connections using TLS version 1.0 through 1.3. +>>>> * `disabled` : The cluster does not accept secure connections using TLS. +>>>> * `fips-140-3` : The cluster only accepts secure connections per the requirements of the Federal Information Processing Standards (FIPS) publication 140-3. Only supported starting with Amazon DocumentDB 5.0 (engine version 3.0.3727) clusters in these regions: ca-central-1, us-west-2, us-east-1, us-east-2, us-gov-east-1, us-gov-west-1. +>>>> * `tls1.2+` : The cluster accepts secure connections using TLS version 1.2 and above. Only supported starting with Amazon DocumentDB 4.0 (engine version 2.0.10980) and Amazon DocumentDB 5.0 (engine version 3.0.11051). +>>>> * `tls1.3+` : The cluster accepts secure connections using TLS version 1.3 and above. Only supported starting with Amazon DocumentDB 4.0 (engine version 2.0.10980) and Amazon DocumentDB 5.0 (engine version 3.0.11051). +>>>> + @@ -390 +400 @@ EngineDefaults -> (structure) - * [AWS CLI 2.31.13 Command Reference](../../index.html) » + * [AWS CLI 2.31.16 Command Reference](../../index.html) »