AWS AmazonRDS documentation change
Summary
Replaced 'AWS Directory Service' with 'Directory Service' in Kerberos authentication introduction and password management sections.
Security assessment
Terminology updates don't modify security mechanisms. The clarification about password management through Directory Service doesn't indicate a new vulnerability or security feature.
Diff
diff --git a/AmazonRDS/latest/AuroraUserGuide/babelfish-active-directory.md b/AmazonRDS/latest/AuroraUserGuide/babelfish-active-directory.md index 6563562d5..0f5f4d1dc 100644 --- a//AmazonRDS/latest/AuroraUserGuide/babelfish-active-directory.md +++ b//AmazonRDS/latest/AuroraUserGuide/babelfish-active-directory.md @@ -9 +9 @@ Setting up Kerberos AuthenticationLogin and user provisioning in Babelfish -Babelfish for Aurora PostgreSQL 15.2 version supports authentication to your DB cluster using Kerberos. This method allows you to use Microsoft Windows Authentication to authenticate users when they connect to your Babelfish database. To do so, you must first configure your DB cluster to use AWS Directory Service for Microsoft Active Directory for Kerberos authentication. For more information, see [What is AWS Directory Service?](https://docs.aws.amazon.com/directoryservice/latest/admin-guide/what_is.html) in the _AWS Directory Service Administration Guide_. +Babelfish for Aurora PostgreSQL 15.2 version supports authentication to your DB cluster using Kerberos. This method allows you to use Microsoft Windows Authentication to authenticate users when they connect to your Babelfish database. To do so, you must first configure your DB cluster to use AWS Directory Service for Microsoft Active Directory for Kerberos authentication. For more information, see [What is Directory Service?](https://docs.aws.amazon.com/directoryservice/latest/admin-guide/what_is.html) in the _AWS Directory Service Administration Guide_. @@ -108 +108 @@ The ALTER LOGIN command supports limited options for Windows logins, including t -All password management is performed through AWS Directory Service, so the ALTER LOGIN command doesn't allow database administrators to change or set passwords for Windows logins. +All password management is performed through Directory Service, so the ALTER LOGIN command doesn't allow database administrators to change or set passwords for Windows logins.