AWS AmazonRDS documentation change
Summary
Removed 'or an Aurora custom endpoint' from the restriction about what cannot be used to generate IAM authentication tokens, now only mentions custom Route 53 DNS records.
Security assessment
This change updates documentation about IAM database authentication restrictions. It clarifies that Aurora custom endpoints can now be used to generate authentication tokens, which is a feature update rather than a security fix. No evidence of a security vulnerability being addressed.
Diff
diff --git a/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.IAMDBAuth.Connecting.AWSCLI.PostgreSQL.md b/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.IAMDBAuth.Connecting.AWSCLI.PostgreSQL.md index 861db52d1..0fbfa119c 100644 --- a//AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.IAMDBAuth.Connecting.AWSCLI.PostgreSQL.md +++ b//AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.IAMDBAuth.Connecting.AWSCLI.PostgreSQL.md @@ -66 +66 @@ The first several characters of the generated token look like the following. -You cannot use a custom Route 53 DNS record or an Aurora custom endpoint instead of the DB cluster endpoint to generate the authentication token. +You cannot use a custom Route 53 DNS record instead of the DB cluster endpoint to generate the authentication token. @@ -102 +102 @@ To download an SSL certificate, see [Using SSL/TLS to encrypt a connection to a -You cannot use a custom Route 53 DNS record or an Aurora custom endpoint instead of the DB cluster endpoint to generate the authentication token. +You cannot use a custom Route 53 DNS record instead of the DB cluster endpoint to generate the authentication token.