AWS AmazonRDS documentation change

Service: AmazonRDS · 2025-11-16 · Documentation medium

File: AmazonRDS/latest/UserGuide/db2-s3-integration.md

Summary

Replaced file references with inline IAM policy JSON documents for S3 integration permissions

Security assessment

The change provides explicit IAM policy examples for S3/KMS permissions required for RDS integration. While security-related documentation, there's no evidence of addressing a specific vulnerability.

Diff

diff --git a/AmazonRDS/latest/UserGuide/db2-s3-integration.md b/AmazonRDS/latest/UserGuide/db2-s3-integration.md
index ad3281f1b..12dfcbc8b 100644
--- a//AmazonRDS/latest/UserGuide/db2-s3-integration.md
+++ b//AmazonRDS/latest/UserGuide/db2-s3-integration.md
@@ -165 +165,23 @@ For Linux, macOS, or Unix:
-        --policy-document file://iam_policy_file_name.json
+        --policy-document '{
+          "Version": "2012-10-17"		 	 	 		 	 	 		 	 	 ,
+          "Statement": [
+            {
+              "Effect": "Allow",
+              "Action": [
+                "kms:GenerateDataKey",
+                "kms:Decrypt",
+                "s3:PutObject",
+                "s3:GetObject",
+                "s3:AbortMultipartUpload",
+                "s3:ListBucket",
+                "s3:DeleteObject",
+                "s3:GetObjectVersion",
+                "s3:ListMultipartUploadParts"
+              ],
+              "Resource": [
+                "arn:aws:s3:::s3_bucket_name/*",
+                "arn:aws:s3:::s3_bucket_name"
+              ]
+            }
+          ]
+        }'
@@ -171 +193,21 @@ For Windows:
-        --policy-document file://iam_policy_file_name.json
+        --policy-document '{
+          "Version": "2012-10-17"		 	 	 		 	 	 		 	 	 ,
+          "Statement": [
+            {
+              "Effect": "Allow",
+                "Action": [
+                  "s3:PutObject",
+                  "s3:GetObject",
+                  "s3:AbortMultipartUpload",
+                  "s3:ListBucket",
+                  "s3:DeleteObject",
+                  "s3:GetObjectVersion",
+                  "s3:ListMultipartUploadParts"
+                ],
+                "Resource": [
+                  "arn:aws:s3:::s3_bucket_name/*",
+                  "arn:aws:s3:::s3_bucket_name"
+                ]
+            }
+          ]
+        }'
@@ -244 +286,12 @@ For Linux, macOS, or Unix:
-        --assume-role-policy-document file://iam_assume_role_policy_file_name.json
+        --assume-role-policy-document '{
+          "Version": "2012-10-17"		 	 	 		 	 	 		 	 	 ,
+          "Statement": [
+            {
+              "Effect": "Allow",
+              "Principal": {
+                "Service": "rds.amazonaws.com"
+              },
+              "Action": "sts:AssumeRole"
+            }
+          ]
+        }'
@@ -250 +303,12 @@ For Windows:
-        --assume-role-policy-document file://iam_assume_role_policy_file_name.json
+        --assume-role-policy-document '{
+          "Version": "2012-10-17"		 	 	 		 	 	 		 	 	 ,
+          "Statement": [
+            {
+              "Effect": "Allow",
+              "Principal": {
+                "Service": "rds.amazonaws.com"
+              },
+              "Action": "sts:AssumeRole"
+            }
+          ]
+        }'