AWS athena high security documentation change
Summary
Added breaking change note for v2.1.0.0: SSL validation now enabled by default and TLS 1.2 enforced for IdP connections.
Security assessment
Explicitly describes a security hardening change that enables SSL validation by default and enforces TLS 1.2, addressing potential man-in-the-middle attacks and weak encryption vulnerabilities.
Diff
diff --git a/athena/latest/ug/odbc-v2-driver-common-authentication-parameters.md b/athena/latest/ug/odbc-v2-driver-common-authentication-parameters.md index 1e77be474..9c729e3f0 100644 --- a//athena/latest/ug/odbc-v2-driver-common-authentication-parameters.md +++ b//athena/latest/ug/odbc-v2-driver-common-authentication-parameters.md @@ -53,0 +54,4 @@ Disables SSL when communicating with the IdP. This option is available for the A +###### Important + +Breaking change in v2.1.0.0: The default behavior for SSL certificate validation when connecting to identity providers has changed. In versions before 2.1.0.0, SSL validation was disabled by default. Starting in v2.1.0.0, SSL validation is enabled by default for all IdP connections. The driver also enforces TLS 1.2 as the minimum TLS version. If you use a local identity provider without a valid SSL certificate (for testing purposes only), set `SSL_Insecure=1` in your connection string. +