AWS AmazonRDS documentation change
Summary
Revised dual-stack mode explanation to include public accessibility and removed private-only limitation for IPv6 endpoints.
Security assessment
Changes describe expanded network capabilities (public IPv6 access) but show no evidence of patching security flaws. Documentation update reflects feature enhancement rather than security remediation.
Diff
diff --git a/AmazonRDS/latest/UserGuide/USER_VPC.WorkingWithRDSInstanceinaVPC.md b/AmazonRDS/latest/UserGuide/USER_VPC.WorkingWithRDSInstanceinaVPC.md index c75e4094d..527e3da72 100644 --- a//AmazonRDS/latest/UserGuide/USER_VPC.WorkingWithRDSInstanceinaVPC.md +++ b//AmazonRDS/latest/UserGuide/USER_VPC.WorkingWithRDSInstanceinaVPC.md @@ -190 +190 @@ For more information about IPv6, see [ IP Addressing](https://docs.aws.amazon.co -When a DB instance can communicate over both the IPv4 and IPv6 addressing protocols, it's running in dual-stack mode. So, resources can communicate with the DB instance over IPv4, IPv6, or both. RDS disables Internet Gateway access for IPv6 endpoints of private dual-stack mode DB instances. RDS does this to ensure that your IPv6 endpoints are private and can only be accessed from within your VPC. +A DB instance runs in dual-stack mode when it can communicate over both IPv4 and IPv6 addressing protocols. Resources can then communicate with the DB instance using either IPv4, IPv6, or both protocols. Private dual-stack mode DB instances have IPv6 endpoints that RDS restricts to VPC access only, ensuring your IPv6 endpoints remain private. Public dual-stack mode DB instances provide both IPv4 and IPv6 endpoints that you can access from the internet. @@ -326,2 +325,0 @@ The following limitations apply to dual-stack network DB instances: - * DB instances that use dual-stack mode must be private. They can't be publicly accessible. -