AWS Security ChangesHomeSearch

AWS dms documentation change

Service: dms · 2026-01-16 · Documentation low

File: dms/latest/userguide/CHAP_Source.DocumentDB.md

Summary

1. Fixed MongoDB command syntax 2. Added requirement for ExtractDocID=true with multi-document transactions 3. Updated ExtractDocID parameter documentation

Security assessment

Changes address functional reliability (preventing task failures with transactions) not security vulnerabilities. The ExtractDocID requirement prevents operational failures but doesn't mitigate security risks or introduce security features.

Diff

diff --git a/dms/latest/userguide/CHAP_Source.DocumentDB.md b/dms/latest/userguide/CHAP_Source.DocumentDB.md
index 531476d0a..580e56685 100644
--- a//dms/latest/userguide/CHAP_Source.DocumentDB.md
+++ b//dms/latest/userguide/CHAP_Source.DocumentDB.md
@@ -34 +34 @@ For example, consider the following documents in a Amazon DocumentDB collection
-    > db.myCollection.find()
+     db.myCollection.find()
@@ -46,0 +47,2 @@ You can optionally set the extra connection attribute `extractDocID` to `true` t
+When using CDC with sources that produce [multi-document transactions](https://www.mongodb.com/docs/manual/reference/method/Session.startTransaction/#mongodb-method-Session.startTransaction), the `ExtractDocId` parameter **must be** set to `true`. If this parameter is not enabled, the AWS DMS task will fail when it encounters a multi-document transaction.
+
@@ -485 +487 @@ Attribute name | Valid values | Default value and description
-`ExtractDocID` |  boolean `true` `false` |  `false` – Use this attribute when `NestingLevel` is set to `"none"`.  If your target database is Amazon DocumentDB, set `'{"ExtractDocID": true}'`.   
+`ExtractDocID` |  `true` `false` |  `false` – Use this attribute when `NestingLevel` is set to `"none"`.  When using CDC with sources that produce [multi-document transactions](https://www.mongodb.com/docs/manual/reference/method/Session.startTransaction/#mongodb-method-Session.startTransaction), the `ExtractDocId` parameter **must be** set to `true`. If this parameter is not enabled, the AWS DMS task will fail when it encounters a multi-document transaction.  
@@ -487 +489 @@ Attribute name | Valid values | Default value and description
-`ReplicateShardCollections ` |  boolean `true` `false` |  When true, AWS DMS replicates data to shard collections. AWS DMS only uses this setting if the target endpoint is a DocumentDB elastic cluster. When this setting is true, note the following:
+`ReplicateShardCollections ` |  `true` `false` |  When true, AWS DMS replicates data to shard collections. AWS DMS only uses this setting if the target endpoint is a DocumentDB elastic cluster. When this setting is true, note the following: