AWS aurora-dsql documentation change
Summary
Added documentation for resource-based policy support in Aurora DSQL, including new permissions and updated managed policies.
Security assessment
The change introduces documentation for new resource-based policy management capabilities (PutClusterPolicy, GetClusterPolicy, DeleteClusterPolicy) and updates to managed policies for fine-grained access control. This enhances security controls but does not address a specific disclosed vulnerability.
Diff
diff --git a/aurora-dsql/latest/userguide/doc-history.md b/aurora-dsql/latest/userguide/doc-history.md index 067ddcaa6..0eace326b 100644 --- a//aurora-dsql/latest/userguide/doc-history.md +++ b//aurora-dsql/latest/userguide/doc-history.md @@ -10,0 +11 @@ Change| Description| Date +Resource-based policy support for Amazon Aurora DSQL| Added resource-based policy (RBP) support with new permissions: `PutClusterPolicy`, `GetClusterPolicy`, and `DeleteClusterPolicy`. These permissions allow managing inline policies attached to Aurora DSQL clusters for fine-grained access control. Updated managed policies AmazonAuroraDSQLFullAccess, AmazonAuroraDSQLReadOnlyAccess, and AmazonAuroraDSQLConsoleFullAccess to include RBP capabilities. For more information, see [AWS managed policies for Amazon Aurora DSQL](https://docs.aws.amazon.com/aurora-dsql/latest/userguide/security-iam-awsmanpol.html).| October 15, 2025