AWS redshift medium security documentation change
Summary
Updated idp_partition parameter documentation with clearer explanations and Azure AD examples
Security assessment
The changes provide critical guidance for securely configuring authentication endpoints in government/China partitions. Incorrect configuration could lead to authentication failures or misrouted credentials. Specific evidence: Added Azure Government endpoint example (login.microsoftonline.us) and Azure China endpoint (login.chinacloudapi.cn).
Diff
diff --git a/redshift/latest/mgmt/jdbc20-configuration-options.md b/redshift/latest/mgmt/jdbc20-configuration-options.md index 7281c897a..f27742307 100644 --- a//redshift/latest/mgmt/jdbc20-configuration-options.md +++ b//redshift/latest/mgmt/jdbc20-configuration-options.md @@ -726 +726 @@ This parameter is optional. -The partition that your Idp (identity provider) is set up in. A partition is a group of AWS Regions. For more information on partitions, see [partition](https://docs.aws.amazon.com/glossary/latest/reference/glos-chap.html?id=docs_gateway#partition) in the _AWS Glossary_. +Specifies the cloud partition where your identity provider (IdP) is configured. This determines which IdP authentication endpoint the driver connects to. @@ -728 +728 @@ The partition that your Idp (identity provider) is set up in. A partition is a g -If this parameter is left blank, Amazon Redshift defaults to the AWS standard partition, which includes all commercial AWS Regions. Possible values are as follows: +If this parameter is left blank, the driver defaults to the commercial partition. Possible values are: @@ -730 +730 @@ If this parameter is left blank, Amazon Redshift defaults to the AWS standard pa - * `us-gov` ‐ The IdP is set up in the AWS GovCloud (US) Regions. + * `us-gov`: Use this value if your IdP is configured in Azure Government. For example, Azure AD Government uses the endpoint `login.microsoftonline.us`. @@ -732 +732 @@ If this parameter is left blank, Amazon Redshift defaults to the AWS standard pa - * `cn` ‐ The IdP is set up in the China Regions. + * `cn`: Use this value if your IdP is configured in the China cloud partition. For example, Azure AD China uses the endpoint `login.chinacloudapi.cn`.