AWS AmazonRDS documentation change
Summary
Updated references from 'AWS Directory Service' to 'Directory Service' throughout the document for terminology consistency
Security assessment
The changes appear to be branding/terminology updates rather than security-related modifications. All references to AWS Directory Service were simplified to Directory Service without altering security configurations, authentication flows, or access controls. The Kerberos authentication setup process remains unchanged.
Diff
diff --git a/AmazonRDS/latest/UserGuide/mysql-kerberos.md b/AmazonRDS/latest/UserGuide/mysql-kerberos.md index 98e2f0e87..2738c1579 100644 --- a//AmazonRDS/latest/UserGuide/mysql-kerberos.md +++ b//AmazonRDS/latest/UserGuide/mysql-kerberos.md @@ -9 +9 @@ Region and version availabilityOverview of Setting up Kerberos authentication fo -You can use Kerberos authentication to authenticate users when they connect to your MySQL DB instance. The DB instance works with AWS Directory Service for Microsoft Active Directory (AWS Managed Microsoft AD) to enable Kerberos authentication. When users authenticate with a MySQL DB instance joined to the trusting domain, authentication requests are forwarded. Forwarded requests go to the domain directory that you create with AWS Directory Service. +You can use Kerberos authentication to authenticate users when they connect to your MySQL DB instance. The DB instance works with AWS Directory Service for Microsoft Active Directory (AWS Managed Microsoft AD) to enable Kerberos authentication. When users authenticate with a MySQL DB instance joined to the trusting domain, authentication requests are forwarded. Forwarded requests go to the domain directory that you create with Directory Service. @@ -21 +21 @@ To set up Kerberos authentication for a MySQL DB instance, complete the followin - 1. Use AWS Managed Microsoft AD to create an AWS Managed Microsoft AD directory. You can use the AWS Management Console, the AWS CLI, or the AWS Directory Service to create the directory. For details about doing so, see [Create your AWS Managed Microsoft AD directory](https://docs.aws.amazon.com/directoryservice/latest/admin-guide/ms_ad_getting_started_create_directory.html) in the _AWS Directory Service Administration Guide_. + 1. Use AWS Managed Microsoft AD to create an AWS Managed Microsoft AD directory. You can use the AWS Management Console, the AWS CLI, or the Directory Service to create the directory. For details about doing so, see [Create your AWS Managed Microsoft AD directory](https://docs.aws.amazon.com/directoryservice/latest/admin-guide/ms_ad_getting_started_create_directory.html) in the _AWS Directory Service Administration Guide_. @@ -44 +44 @@ You use AWS Managed Microsoft AD to set up Kerberos authentication for a MySQL D -AWS Directory Service creates a fully managed Active Directory in the AWS Cloud. When you create an AWS Managed Microsoft AD directory, AWS Directory Service creates two domain controllers and Domain Name System (DNS) servers on your behalf. The directory servers are created in different subnets in a VPC. This redundancy helps make sure that your directory remains accessible even if a failure occurs. +Directory Service creates a fully managed Active Directory in the AWS Cloud. When you create an AWS Managed Microsoft AD directory, Directory Service creates two domain controllers and Domain Name System (DNS) servers on your behalf. The directory servers are created in different subnets in a VPC. This redundancy helps make sure that your directory remains accessible even if a failure occurs. @@ -46 +46 @@ AWS Directory Service creates a fully managed Active Directory in the AWS Cloud. -When you create an AWS Managed Microsoft AD directory, AWS Directory Service performs the following tasks on your behalf: +When you create an AWS Managed Microsoft AD directory, Directory Service performs the following tasks on your behalf: @@ -54 +54 @@ When you create an AWS Managed Microsoft AD directory, AWS Directory Service per -Be sure to save this password. AWS Directory Service doesn't store it. You can reset it, but you can't retrieve it. +Be sure to save this password. Directory Service doesn't store it. You can reset it, but you can't retrieve it. @@ -93 +93 @@ The Admin account also has rights to perform the following domain-wide activitie - 1. Sign in to the AWS Management Console and open the AWS Directory Service console at [https://console.aws.amazon.com/directoryservicev2/](https://console.aws.amazon.com/directoryservicev2/). + 1. Sign in to the AWS Management Console and open the Directory Service console at [https://console.aws.amazon.com/directoryservicev2/](https://console.aws.amazon.com/directoryservicev2/). @@ -152 +152 @@ Subnets for the directory servers. The two subnets must be in different Availabi - + @@ -161 +161 @@ To see information about your directory, choose the directory name in the direct - + @@ -165 +165 @@ To see information about your directory, choose the directory name in the direct -For Amazon RDS to call AWS Directory Service for you, an IAM role that uses the managed IAM policy `AmazonRDSDirectoryServiceAccess` is required. This role allows Amazon RDS to make calls to the AWS Directory Service. +For Amazon RDS to call Directory Service for you, an IAM role that uses the managed IAM policy `AmazonRDSDirectoryServiceAccess` is required. This role allows Amazon RDS to make calls to the Directory Service. @@ -232 +232 @@ You can create users with the Active Directory Users and Computers tool. This to -To create users in an AWS Directory Service directory, you must be connected to an Amazon EC2 instance based on Microsoft Windows. This instance must be a member of the AWS Directory Service directory and be logged in as a user that has privileges to create users. For more information, see [Manage users and groups in AWS Managed Microsoft AD](https://docs.aws.amazon.com/directoryservice/latest/admin-guide/creating_ad_users_and_groups.html) in the _AWS Directory Service Administration Guide_. +To create users in an Directory Service directory, you must be connected to an Amazon EC2 instance based on Microsoft Windows. This instance must be a member of the Directory Service directory and be logged in as a user that has privileges to create users. For more information, see [Manage users and groups in AWS Managed Microsoft AD](https://docs.aws.amazon.com/directoryservice/latest/admin-guide/creating_ad_users_and_groups.html) in the _AWS Directory Service Administration Guide_.