AWS AWSCloudFormation documentation change
Summary
Updated documentation for AWS::Timestream::InfluxDBCluster resource with detailed property descriptions including cluster types, storage configurations, networking, authentication, and return values
Security assessment
The changes add documentation about security features including: 1) Password storage in AWS Secrets Manager, 2) VPC security group associations, 3) Network type configuration (IPV4/DUAL), 4) Public accessibility controls, and 5) Initial admin user authentication. However, there is no evidence these changes address a specific security vulnerability or incident - they appear to be routine documentation improvements for a new or existing service.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-resource-timestream-influxdbcluster.md b/AWSCloudFormation/latest/TemplateReference/aws-resource-timestream-influxdbcluster.md index 9ea62c1cb..7fd82c2cd 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-resource-timestream-influxdbcluster.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-resource-timestream-influxdbcluster.md @@ -9 +9 @@ This is the new _CloudFormation Template Reference Guide_. Please update your bo -The `AWS::Timestream::InfluxDBCluster` resource Property description not available. for Timestream. +The `AWS::Timestream::InfluxDBCluster` resource specifies an Amazon Timestream for InfluxDB cluster. A cluster supports InfluxDB v2 with multi-node read replicas for high availability and read scaling, with a primary node and one or more read replicas distributed across availability zones. A cluster also supports InfluxDB v3 deployments in either Core (single-node for near real-time workloads) or Enterprise (multi-node with compaction for high-cardinality data and long-term analytics) configurations. You can configure instance types, storage, networking, failover behavior, and deployment type for your cluster. @@ -77 +77 @@ To declare this entity in your CloudFormation template, use the following syntax -Property description not available. +The amount of storage to allocate for your DB storage type in GiB (gibibytes). @@ -92 +92 @@ _Required_ : No -Property description not available. +The name of the initial InfluxDB bucket. All InfluxDB data is stored in a bucket. A bucket combines the concept of a database and a retention period (the duration of time that each data point persists). A bucket belongs to an organization. @@ -109 +109 @@ _Minimum_ : `2` -Property description not available. +The Timestream for InfluxDB DB instance type to run InfluxDB on. @@ -122 +122 @@ _Required_ : No -Property description not available. +The name or id of the DB parameter group to assign to your DB cluster. DB parameter groups specify how the database is configured. For example, DB parameter groups can specify the limit for query concurrency. @@ -139 +139,12 @@ _Minimum_ : `3` -Property description not available. +The Timestream for InfluxDB DB storage type to read and write InfluxDB data. + +You can choose between 3 different types of provisioned Influx IOPS included storage according to your workloads requirements: + + * Influx IO Included 3000 IOPS + + * Influx IO Included 12000 IOPS + + * Influx IO Included 16000 IOPS + + + @@ -152 +163 @@ _Required_ : No -Property description not available. +Specifies the type of cluster to create. @@ -165 +176 @@ _Required_ : No -Property description not available. +Specifies the behavior of failure recovery when the primary node of the cluster fails. @@ -178 +189 @@ _Required_ : No -Property description not available. +Configuration for sending InfluxDB engine logs to a specified S3 bucket. @@ -189 +200 @@ _Required_ : No -Property description not available. +The name that uniquely identifies the DB cluster when interacting with the Amazon Timestream for InfluxDB API and CLI commands. This name will also be a prefix included in the endpoint. Cluster names must be unique per customer and per region. @@ -206 +217 @@ _Minimum_ : `3` -Property description not available. +Specifies whether the network type of the Timestream for InfluxDB cluster is IPV4, which can communicate over IPv4 protocol only, or DUAL, which can communicate over both IPv4 and IPv6 protocols. @@ -219 +230 @@ _Required_ : No -Property description not available. +The name of the initial organization for the initial admin user in InfluxDB. An InfluxDB organization is a workspace for a group of users. @@ -234 +245 @@ _Required_ : No -Property description not available. +The password of the initial admin user created in InfluxDB. This password will allow you to access the InfluxDB UI to perform various administrative tasks and also use the InfluxDB CLI to create an operator token. These attributes will be stored in a Secret created in Amazon Secrets Manager in your account. @@ -251 +262 @@ _Minimum_ : `8` -Property description not available. +The port number on which InfluxDB accepts connections. @@ -266 +277 @@ _Required_ : No -Property description not available. +Configures the DB cluster with a public IP to facilitate access. @@ -277 +288 @@ _Required_ : No -Property description not available. +A list of key-value pairs to associate with the DB cluster. @@ -292 +303 @@ _Required_ : No -Property description not available. +The username of the initial admin user created in InfluxDB. Must start with a letter and can't end with a hyphen or contain two consecutive hyphens. This username will allow you to access the InfluxDB UI to perform various administrative tasks and also use the InfluxDB CLI to create an operator token. These attributes will be stored in a Secret created in Amazon Secrets Manager in your account. @@ -307 +318 @@ _Required_ : No -Property description not available. +A list of VPC security group IDs to associate with the DB cluster. @@ -322 +333 @@ _Required_ : No -Property description not available. +A list of VPC subnet IDs to associate with the DB cluster. Provide at least two VPC subnet IDs in different availability zones when deploying with a Multi-AZ standby. @@ -345 +356 @@ _Required_ : No -Property description not available. +The Amazon Resource Name (ARN) of the DB cluster. @@ -350 +361 @@ Property description not available. -Represents an available endpoint against which to make API calls against, as well as the TTL for that endpoint. +The endpoint used to connect to the InfluxDB cluster. The default InfluxDB port is 8086. @@ -355 +366,6 @@ Represents an available endpoint against which to make API calls against, as wel -Property description not available. +The database engine type of the DB cluster. + +`Id` + + +A service-generated unique identifier for the InfluxDB cluster. @@ -360 +376 @@ Property description not available. -Property description not available. +The Amazon Resource Name (ARN) of the Amazon Secrets Manager secret containing the initial InfluxDB authorization parameters. The secret value is a JSON formatted key-value pair holding InfluxDB authorization values: organization, bucket, username, and password. @@ -365 +381 @@ Property description not available. -Represents an available endpoint against which to make API calls against, as well as the TTL for that endpoint. +The endpoint used to connect to the Timestream for InfluxDB cluster for read-only operations. @@ -370 +386 @@ Represents an available endpoint against which to make API calls against, as wel -Property description not available. +The status of the DB cluster.