AWS redshift medium security documentation change
Summary
Updated links and emphasized recommendation to use GetCredentials API over GetClusterCredentials for better RBAC
Security assessment
The change explicitly recommends migrating to GetCredentials API for 'comprehensive role-based access control (RBAC) functionality', which directly relates to improving access control security. This promotes a more secure authentication method compared to the legacy approach.
Diff
diff --git a/redshift/latest/mgmt/serverless-migration.md b/redshift/latest/mgmt/serverless-migration.md index 337b142a6..e2bb939c8 100644 --- a//redshift/latest/mgmt/serverless-migration.md +++ b//redshift/latest/mgmt/serverless-migration.md @@ -88 +88 @@ To establish a connection using the Amazon Redshift ODBC driver version 2.x with -If you prefer logging in with IAM, use the Amazon Redshift Serverless [`GetCredentials`](https://docs.aws.amazon.com/redshift-serverless/latest/APIReference/API_GetCredentials.html) API operation. +If you prefer logging in with IAM, use the Amazon Redshift Serverless [`GetCredentials`](https://docs.aws.amazon.com//redshift-serverless/latest/APIReference/API_GetCredentials.html) API operation. @@ -151 +151 @@ To establish a connection using the Amazon Redshift ODBC driver version 2.x with -When connecting to Amazon Redshift Serverless, we recommend that you use the [`GetCredentials`](https://docs.aws.amazon.com/redshift-serverless/latest/APIReference/API_GetCredentials.html) API. This API offers comprehensive role-based access control (RBAC) functionality as well as other new features that aren't available in `GetClusterCredentials`. We support the `GetClusterCredentials` API to simplify the transition from provisioned clusters to serverless workgroups, but we strongly recommend migrating to using `GetCredentials` as soon as possible for optimal compatibility. +When connecting to Amazon Redshift Serverless, we recommend that you use the [`GetCredentials`](https://docs.aws.amazon.com//redshift-serverless/latest/APIReference/API_GetCredentials.html) API. This API offers comprehensive role-based access control (RBAC) functionality as well as other new features that aren't available in `GetClusterCredentials`. We support the `GetClusterCredentials` API to simplify the transition from provisioned clusters to serverless workgroups, but we strongly recommend migrating to using `GetCredentials` as soon as possible for optimal compatibility. @@ -153 +153 @@ When connecting to Amazon Redshift Serverless, we recommend that you use the [`G -You can establish a connection to Amazon Redshift Serverless using the [`GetClusterCredentials`](https://docs.aws.amazon.com/redshift/latest/APIReference/API_GetClusterCredentials.html) API. To implement this authentication method, modify your client or application by incorporating the following parameters: +You can establish a connection to Amazon Redshift Serverless using the [`GetClusterCredentials`](https://docs.aws.amazon.com//redshift/latest/APIReference/API_GetClusterCredentials.html) API. To implement this authentication method, modify your client or application by incorporating the following parameters: