AWS fedramp documentation change

Service: fedramp · 2026-03-28 · Documentation low

File: fedramp/latest/userguide/amazon-aurora-mysql.md

Summary

Updated FedRAMP requirement codes from FRR-RSC-xx to SCG-xxx format, updated version and date, restructured sections to consolidate requirements under SCG-CSO-RSC, and added detailed guidance for administrative accounts, settings, and privileged settings.

Security assessment

This change updates Amazon Aurora MySQL documentation to reflect new FedRAMP control naming conventions and provides more detailed guidance for secure configuration of administrative and privileged accounts. The documentation now explicitly addresses secure defaults, configuration comparison, export, and API configuration under updated SCG requirements. While this enhances security documentation and compliance guidance, there is no evidence of addressing a specific security vulnerability or incident. The version update from 1.0.0 to 1.0.2 suggests routine documentation maintenance rather than security patching.

Diff

diff --git a/fedramp/latest/userguide/amazon-aurora-mysql.md b/fedramp/latest/userguide/amazon-aurora-mysql.md
index 62356a587..f088a6ecc 100644
--- a//fedramp/latest/userguide/amazon-aurora-mysql.md
+++ b//fedramp/latest/userguide/amazon-aurora-mysql.md
@@ -3 +3 @@
-Document InformationOverviewFedRAMP RequirementsAdministrative Account ModelFRR-RSC-01: Administrative AccountsFRR-RSC-02: Administrative SettingsFRR-RSC-03: Privileged SettingsIAM Least Privilege PoliciesFRR-RSC-04: Secure DefaultsFRR-RSC-05: Configuration ComparisonFRR-RSC-06: Configuration ExportFRR-RSC-07: API ConfigurationAdditional Resources
+Document InformationOverviewFedRAMP RequirementsAdministrative Account ModelSCG-CSO-RSC: Recommended Secure ConfigurationIAM Least Privilege PoliciesSCG-CSO-SDF: Secure DefaultsSCG-ENH-CMP: Configuration ComparisonSCG-ENH-EXP: Configuration ExportSCG-ENH-API: API ConfigurationAdditional Resources
@@ -11 +11 @@ This guide provides security configuration requirements and implementation examp
-Version |  1.0.0  
+Version |  1.0.2  
@@ -13 +13 @@ Version |  1.0.0
-Last Updated |  2026-01-09  
+Last Updated |  2026-03-26  
@@ -28 +28 @@ Amazon Aurora MySQL must comply with the following FedRAMP requirements:
-  * FRR-RSC-01
+  * SCG-CSO-RSC
@@ -30 +30 @@ Amazon Aurora MySQL must comply with the following FedRAMP requirements:
-  * FRR-RSC-02
+  * SCG-CSO-SDF
@@ -32 +32 @@ Amazon Aurora MySQL must comply with the following FedRAMP requirements:
-  * FRR-RSC-03
+  * SCG-ENH-CMP
@@ -34 +34 @@ Amazon Aurora MySQL must comply with the following FedRAMP requirements:
-  * FRR-RSC-04
+  * SCG-ENH-EXP
@@ -36,5 +36 @@ Amazon Aurora MySQL must comply with the following FedRAMP requirements:
-  * FRR-RSC-05
-
-  * FRR-RSC-06
-
-  * FRR-RSC-07
+  * SCG-ENH-API
@@ -53 +49,7 @@ Account Type |  Database Master User Account
-## FRR-RSC-01: Administrative Accounts
+## SCG-CSO-RSC: Recommended Secure Configuration
+
+**Applicable:** Yes
+
+This requirement consolidates guidance for: 1\. Instructions on how to securely access, configure, operate, and decommission top-level administrative accounts 2\. Explanations of security-related settings that can be operated only by top-level administrative accounts 3\. Explanations of security-related settings that can be operated only by privileged accounts
+
+### Part 1: Administrative Accounts
@@ -125 +127 @@ Amazon Aurora MySQL administrative access is managed through the Master database
-## FRR-RSC-02: Administrative Settings
+### Part 2: Administrative Settings
@@ -438 +440 @@ The master user account in Amazon Aurora MySQL has elevated privileges that cann
-## FRR-RSC-03: Privileged Settings
+### Part 3: Privileged Settings
@@ -726 +728 @@ Enable comprehensive logging and monitoring of all privileged account activities
-## FRR-RSC-04: Secure Defaults
+## SCG-CSO-SDF: Secure Defaults
@@ -755 +757 @@ Ensure Aurora MySQL clusters are created with security-first configurations incl
-## FRR-RSC-05: Configuration Comparison
+## SCG-ENH-CMP: Configuration Comparison
@@ -761 +763 @@ Use AWS Config rules and custom scripts to compare current Aurora MySQL configur
-## FRR-RSC-06: Configuration Export
+## SCG-ENH-EXP: Configuration Export
@@ -767 +769 @@ Export Aurora MySQL configuration using AWS CLI describe commands in JSON format
-## FRR-RSC-07: API Configuration
+## SCG-ENH-API: API Configuration