AWS Security ChangesHomeSearch

AWS dms documentation change

Service: dms · 2026-03-07 · Documentation low

File: dms/latest/userguide/CHAP_Tasks.AssessmentReport.SqlServer.md

Summary

Updated documentation regarding MS-Replication checks for CDC usage. Replaced references to 'ignoreMsReplicationEnablement ECA' with guidance to check if MS-Replication itself is enabled, and updated related informational links.

Security assessment

The changes focus on correcting/updating instructions for replication configuration checks rather than addressing vulnerabilities. While replication configuration impacts data integrity, there's no evidence this change addresses a specific security flaw. The modification appears to clarify proper CDC setup requirements rather than patch a security weakness.

Diff

diff --git a/dms/latest/userguide/CHAP_Tasks.AssessmentReport.SqlServer.md b/dms/latest/userguide/CHAP_Tasks.AssessmentReport.SqlServer.md
index d7aff578d..4116ba84c 100644
--- a//dms/latest/userguide/CHAP_Tasks.AssessmentReport.SqlServer.md
+++ b//dms/latest/userguide/CHAP_Tasks.AssessmentReport.SqlServer.md
@@ -5 +5 @@
-Validate if secondary indexes are enabled on the target database during full-loadValidate that limited LOB mode only is used when BatchApplyEnabled is set to trueValidate if target database has any triggers enabled on tables in the scope of the taskCheck if tables in task scope contain computed columnsCheck if tables in task scope have column store indexesCheck if memory optimized tables are a part of the task scopeCheck if temporal tables are a part of the task scopeCheck if delayed durability is enabled at the database levelCheck if accelerated data recovery is enabled at the database levelCheck if table mapping has more than 10K tables with primary keysCheck if the source database has tables or schema names with special characters.Check if the source database has column names with masked dataCheck if the source database has encrypted backupsCheck if the source database has backups stored at a URL or on Windows Azure.Check if the source database has backups on multiple disksCheck if the source database has at least one full backupCheck if the source database has sparse columns and columnar structure compression.Check if the source database instance has server level auditing for SQL Server 2008 or SQL Server 2008 R2Check if the source database has geometry columns for full LOB modeCheck if the source database has columns with the Identity property.Check if the DMS user has FULL LOAD permissionsCheck if the DMS user has FULL LOAD and CDC or CDC only permissionsCheck whether the ignoreMsReplicationEnablement ECA is set when using MS-CDC with on-premises or EC2 databasesCheck if the DMS user has the VIEW DEFINITION permission.Check if the DMS user has the VIEW DATABASE STATE permission on the MASTER database for users without the Sysadmin role.Check if the DMS user has the VIEW SERVER STATE permission.Validate if text repl size parameter is not unlimitedValidate if Primary Key or Unique Index exist on target for Batch ApplyValidate if both Primary Key and Unique index exist on target when batch apply enabledValidate if table has primary key or unique index when DMS validation is enabledValidate if AWS DMS user has necessary privileges to the targetRecommendation on using MaxFullLoadSubTasks settingCheck Transformation Rule for Digits RandomizeCheck Transformation Rule for Digits maskCheck Transformation Rule for Hashing maskVerify that Data Validation task settings and Data Masking Digit randomization are not enabled simultaneouslyVerify that Data Validation task settings and Data Masking Hashing mask are not enabled simultaneouslyVerify that Data Validation task settings and Data Masking Digit mask are not enabled simultaneouslyValidate that at least one selected object exists in the source databaseValidate that secondary constraints and indexes (non-primary) are present in the source database
+Validate if secondary indexes are enabled on the target database during full-loadValidate that limited LOB mode only is used when BatchApplyEnabled is set to trueValidate if target database has any triggers enabled on tables in the scope of the taskCheck if tables in task scope contain computed columnsCheck if tables in task scope have column store indexesCheck if memory optimized tables are a part of the task scopeCheck if temporal tables are a part of the task scopeCheck if delayed durability is enabled at the database levelCheck if accelerated data recovery is enabled at the database levelCheck if table mapping has more than 10K tables with primary keysCheck if the source database has tables or schema names with special characters.Check if the source database has column names with masked dataCheck if the source database has encrypted backupsCheck if the source database has backups stored at a URL or on Windows Azure.Check if the source database has backups on multiple disksCheck if the source database has at least one full backupCheck if the source database has sparse columns and columnar structure compression.Check if the source database instance has server level auditing for SQL Server 2008 or SQL Server 2008 R2Check if the source database has geometry columns for full LOB modeCheck if the source database has columns with the Identity property.Check if the DMS user has FULL LOAD permissionsCheck if the DMS user has FULL LOAD and CDC or CDC only permissionsCheck whether MS-Replication is enabled for CDC on on-premises or EC2 databases.Check if the DMS user has the VIEW DEFINITION permission.Check if the DMS user has the VIEW DATABASE STATE permission on the MASTER database for users without the Sysadmin role.Check if the DMS user has the VIEW SERVER STATE permission.Validate if text repl size parameter is not unlimitedValidate if Primary Key or Unique Index exist on target for Batch ApplyValidate if both Primary Key and Unique index exist on target when batch apply enabledValidate if table has primary key or unique index when DMS validation is enabledValidate if AWS DMS user has necessary privileges to the targetRecommendation on using MaxFullLoadSubTasks settingCheck Transformation Rule for Digits RandomizeCheck Transformation Rule for Digits maskCheck Transformation Rule for Hashing maskVerify that Data Validation task settings and Data Masking Digit randomization are not enabled simultaneouslyVerify that Data Validation task settings and Data Masking Hashing mask are not enabled simultaneouslyVerify that Data Validation task settings and Data Masking Digit mask are not enabled simultaneouslyValidate that at least one selected object exists in the source databaseValidate that secondary constraints and indexes (non-primary) are present in the source database
@@ -57 +57 @@ This section describes individual premigration assessments for migration tasks t
-  * Check whether the ignoreMsReplicationEnablement ECA is set when using MS-CDC with on-premises or EC2 databases
+  * Check whether MS-Replication is enabled for CDC on on-premises or EC2 databases.
@@ -287 +287 @@ For more information, see [Limitations on using SQL Server as a source for AWS D
-## Check whether the `ignoreMsReplicationEnablement` ECA is set when using MS-CDC with on-premises or EC2 databases
+## Check whether MS-Replication is enabled for CDC on on-premises or EC2 databases.
@@ -291 +291 @@ For more information, see [Limitations on using SQL Server as a source for AWS D
-Check whether the `ignoreMsReplicationEnablement` extra connection attribute (ECA) is set when using MS-CDC with on-premises or EC2 databases.
+Check whether MS-Replication is enabled for CDC on on-premises or EC2 databases.
@@ -293 +293 @@ Check whether the `ignoreMsReplicationEnablement` extra connection attribute (EC
-For more information, see [Limitations on using SQL Server as a source for AWS DMS](./CHAP_Source.SQLServer.html#CHAP_Source.SQLServer.Limitations).
+For more information about configuring MS-Replication, see [Capturing data changes for self-managed SQL Server on-premises or on Amazon EC2](./CHAP_Source.SQLServer.CDC.html#CHAP_Source.SQLServer.CDC.Selfmanaged).