AWS redshift documentation change
Summary
Updated documentation for the 'partition' parameter in IdP authentication configuration. Clarified partition definitions, added examples for Azure Government and China endpoints.
Security assessment
The changes provide clearer guidance on configuring secure authentication endpoints for identity providers. While not fixing a specific vulnerability, improved documentation reduces misconfiguration risks. No evidence of a security incident being addressed.
Diff
diff --git a/redshift/latest/mgmt/python-configuration-options.md b/redshift/latest/mgmt/python-configuration-options.md index 20c18d0ea..7f90f378c 100644 --- a//redshift/latest/mgmt/python-configuration-options.md +++ b//redshift/latest/mgmt/python-configuration-options.md @@ -334 +334 @@ This parameter is required only when authenticating using `BrowserIdcAuthPlugin` -The partition that your Idp (identity provider) is set up in. A partition is a group of AWS Regions. For more information on partitions, see [partition](https://docs.aws.amazon.com/glossary/latest/reference/glos-chap.html?id=docs_gateway#partition) in the _AWS Glossary_. +Specifies the cloud partition where your identity provider (IdP) is configured. This determines which IdP authentication endpoint the driver connects to. @@ -336 +336 @@ The partition that your Idp (identity provider) is set up in. A partition is a g -If this parameter is left blank, Amazon Redshift defaults to the AWS standard partition, which includes all commercial AWS Regions. Possible values are as follows: +If this parameter is left blank, the driver defaults to the commercial partition. Possible values are: @@ -338 +338 @@ If this parameter is left blank, Amazon Redshift defaults to the AWS standard pa - * `us-gov` ‐ The IdP is set up in the AWS GovCloud (US) Regions. + * `us-gov`: Use this value if your IdP is configured in Azure Government. For example, Azure AD Government uses the endpoint `login.microsoftonline.us`. @@ -340 +340 @@ If this parameter is left blank, Amazon Redshift defaults to the AWS standard pa - * `cn` ‐ The IdP is set up in the China Regions. + * `cn`: Use this value if your IdP is configured in the China cloud partition. For example, Azure AD China uses the endpoint `login.chinacloudapi.cn`.