AWS AmazonRDS documentation change
Summary
Updated documentation for dual-stack mode DB clusters to clarify that public dual-stack instances are now supported, with both IPv4/IPv6 internet access. Removed previous limitation stating dual-stack clusters must be private.
Security assessment
The change adds public accessibility for IPv6 endpoints without evidence of addressing a specific vulnerability. While it mentions IPv6 endpoints remain private in VPCs, this is existing security posture clarification, not a new security fix or feature.
Diff
diff --git a/AmazonRDS/latest/AuroraUserGuide/USER_VPC.WorkingWithRDSInstanceinaVPC.md b/AmazonRDS/latest/AuroraUserGuide/USER_VPC.WorkingWithRDSInstanceinaVPC.md index 2abd61aa8..724493ea2 100644 --- a//AmazonRDS/latest/AuroraUserGuide/USER_VPC.WorkingWithRDSInstanceinaVPC.md +++ b//AmazonRDS/latest/AuroraUserGuide/USER_VPC.WorkingWithRDSInstanceinaVPC.md @@ -176 +176 @@ For more information about IPv6, see [ IP Addressing](https://docs.aws.amazon.co -When a DB cluster can communicate over both the IPv4 and IPv6 addressing protocols, it's running in dual-stack mode. So, resources can communicate with the DB cluster over IPv4, IPv6, or both. RDS disables Internet Gateway access for IPv6 endpoints of private dual-stack mode DB instances. RDS does this to ensure that your IPv6 endpoints are private and can only be accessed from within your VPC. +A DB cluster runs in dual-stack mode when it can communicate over both IPv4 and IPv6 addressing protocols. Resources can then communicate with the DB cluster using either IPv4, IPv6, or both protocols. Private dual-stack mode DB instances have IPv6 endpoints that RDS restricts to VPC access only, ensuring your IPv6 endpoints remain private. Public dual-stack mode DB instances provide both IPv4 and IPv6 endpoints that you can access from the internet. @@ -352,2 +351,0 @@ The following limitations apply to dual-stack network DB clusters: - * DB clusters that use dual-stack mode must be private. They can't be publicly accessible. -