AWS cli high security documentation change

Service: cli · 2025-10-16 · Security-related high

File: cli/latest/reference/docdb/reset-db-cluster-parameter-group.md

Summary

Added detailed TLS configuration options for cluster parameters, including FIPS 140-3 compliance and TLS version requirements

Security assessment

The change adds security documentation about enforcing specific TLS versions and FIPS compliance when resetting parameters, which directly affects secure communication settings.

Diff

diff --git a/cli/latest/reference/docdb/reset-db-cluster-parameter-group.md b/cli/latest/reference/docdb/reset-db-cluster-parameter-group.md
index 849ac57e3..1cd014988 100644
--- a//cli/latest/reference/docdb/reset-db-cluster-parameter-group.md
+++ b//cli/latest/reference/docdb/reset-db-cluster-parameter-group.md
@@ -15 +15 @@
-  * [AWS CLI 2.31.13 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.16 Command Reference](../../index.html) »
@@ -119 +119,11 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/docdb-
->>> Specifies the value of the parameter.
+>>> Specifies the value of the parameter. Must be one or more of the cluster parameter’s `AllowedValues` in CSV format:
+>>> 
+>>> Valid values are:
+>>> 
+>>>   * `enabled` : The cluster accepts secure connections using TLS version 1.0 through 1.3.
+>>>   * `disabled` : The cluster does not accept secure connections using TLS.
+>>>   * `fips-140-3` : The cluster only accepts secure connections per the requirements of the Federal Information Processing Standards (FIPS) publication 140-3. Only supported starting with Amazon DocumentDB 5.0 (engine version 3.0.3727) clusters in these regions: ca-central-1, us-west-2, us-east-1, us-east-2, us-gov-east-1, us-gov-west-1.
+>>>   * `tls1.2+` : The cluster accepts secure connections using TLS version 1.2 and above. Only supported starting with Amazon DocumentDB 4.0 (engine version 2.0.10980) and Amazon DocumentDB 5.0 (engine version 3.0.11051).
+>>>   * `tls1.3+` : The cluster accepts secure connections using TLS version 1.3 and above. Only supported starting with Amazon DocumentDB 4.0 (engine version 2.0.10980) and Amazon DocumentDB 5.0 (engine version 3.0.11051).
+>>> 
+
@@ -359 +369 @@ DBClusterParameterGroupName -> (string)
-  * [AWS CLI 2.31.13 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.16 Command Reference](../../index.html) »