AWS AmazonRDS medium security documentation change
Summary
Added two new RDS event messages (RDS-EVENT-0501 and RDS-EVENT-052) related to server certificate rotation requiring maintenance reboots
Security assessment
Certificate rotation is a security best practice to prevent expired/compromised certificates. The explicit documentation of mandatory certificate rotation events and reboots indicates proactive security maintenance.
Diff
diff --git a/AmazonRDS/latest/UserGuide/USER_Events.Messages.md b/AmazonRDS/latest/UserGuide/USER_Events.Messages.md index 20739656f..c305d0580 100644 --- a//AmazonRDS/latest/UserGuide/USER_Events.Messages.md +++ b//AmazonRDS/latest/UserGuide/USER_Events.Messages.md @@ -252,0 +253,2 @@ maintenance | RDS-EVENT-0429 | Amazon RDS can't perform the OS upgrade because +maintenance | RDS-EVENT-0501 | Amazon RDS DB instance's server certificate requires rotation through a pending maintenance action. | DB instance's server certificate requires rotation through a pending maintenance action. Amazon RDS reboots your database during this maintenance to complete the certificate rotation. To schedule this maintenance, go to the **Maintenance & backups** tab and choose **Apply now** or **Schedule for next maintenance window**. If the change is not scheduled, Amazon RDS automatically applies it in your mainteance window on the auto apply date shown in your maintenance action. +maintenance | RDS-EVENT-052 | Amazon RDS RDS has scheduled a server certificate rotation for DB instance DB instance during the next maintenance window. This maintenance will require a database reboot. | None