AWS Security ChangesHomeSearch

AWS cli high security documentation change

Service: cli · 2025-10-16 · Security-related high

File: cli/latest/reference/docdb/modify-db-cluster-parameter-group.md

Summary

Added detailed TLS configuration options for cluster parameters, including FIPS 140-3 compliance and TLS version requirements

Security assessment

The change explicitly documents security-related TLS settings and FIPS compliance requirements for secure connections. This directly impacts encryption standards and secure communication configuration.

Diff

diff --git a/cli/latest/reference/docdb/modify-db-cluster-parameter-group.md b/cli/latest/reference/docdb/modify-db-cluster-parameter-group.md
index 9eb9091f8..0d113d084 100644
--- a//cli/latest/reference/docdb/modify-db-cluster-parameter-group.md
+++ b//cli/latest/reference/docdb/modify-db-cluster-parameter-group.md
@@ -15 +15 @@
-  * [AWS CLI 2.31.13 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.16 Command Reference](../../index.html) »
@@ -120 +120,11 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/docdb-
->>> Specifies the value of the parameter.
+>>> Specifies the value of the parameter. Must be one or more of the cluster parameter’s `AllowedValues` in CSV format:
+>>> 
+>>> Valid values are:
+>>> 
+>>>   * `enabled` : The cluster accepts secure connections using TLS version 1.0 through 1.3.
+>>>   * `disabled` : The cluster does not accept secure connections using TLS.
+>>>   * `fips-140-3` : The cluster only accepts secure connections per the requirements of the Federal Information Processing Standards (FIPS) publication 140-3. Only supported starting with Amazon DocumentDB 5.0 (engine version 3.0.3727) clusters in these regions: ca-central-1, us-west-2, us-east-1, us-east-2, us-gov-east-1, us-gov-west-1.
+>>>   * `tls1.2+` : The cluster accepts secure connections using TLS version 1.2 and above. Only supported starting with Amazon DocumentDB 4.0 (engine version 2.0.10980) and Amazon DocumentDB 5.0 (engine version 3.0.11051).
+>>>   * `tls1.3+` : The cluster accepts secure connections using TLS version 1.3 and above. Only supported starting with Amazon DocumentDB 4.0 (engine version 2.0.10980) and Amazon DocumentDB 5.0 (engine version 3.0.11051).
+>>> 
+
@@ -341 +351 @@ DBClusterParameterGroupName -> (string)
-  * [AWS CLI 2.31.13 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.16 Command Reference](../../index.html) »