AWS managedservices documentation change
Summary
Updated change type schemas document to add three new change types (ct-0p1oqt4xcp1cv, ct-2sav5hzk5twk4, ct-3k67klld7cimj) and modify existing patterns for KMS key ARNs and domain names
Security assessment
The changes include: 1) Updated KMS key ARN pattern to support multi-region keys (mrk- prefix) and additional AWS partitions (aws-cn, aws-us-gov), which enhances security documentation by clarifying supported key formats. 2) Added new change type for DNS scavenging remediation (ct-3k67klld7cimj) which addresses DNS security by preventing inadvertent removal of DNS records for Windows failover clusters. 3) Added change types for RDS parameter group updates and VPN tunnel replacement. While these changes improve security documentation and address potential DNS security issues, there's no concrete evidence of addressing a specific security vulnerability or incident.
Diff
diff --git a/managedservices/latest/ctref/schemas.md b/managedservices/latest/ctref/schemas.md index ff3006f98..64da49bdc 100644 --- a//managedservices/latest/ctref/schemas.md +++ b//managedservices/latest/ctref/schemas.md @@ -5 +5 @@ -ct-00tlkda4242x7ct-00zr0b0ozlcn3ct-0176f0n99vcpsct-01zl37gmuk4q2ct-02ocqy2i0jx3tct-02u0hoaa9gratct-03ms1d7xrck8wct-03mv2mypai537ct-03t7kvuwx6rgrct-03ytgoevfebjrct-042luqo63j4mxct-046aizcwg5idfct-04gzyy008v1bgct-054ysptoo4gykct-059ewa92tc2i1ct-05muqzievnxk5ct-05yb337abq3x5ct-063qsm82cfxu6ct-06bwg93ukgg8tct-06mjngx5flwtoct-07jzw8bzd2on7ct-08avsj2e9mc7gct-08sgdn5zowyylct-09qbhy7kvtxqwct-09t6q7j9v5hrnct-0ah3gwb9seqk2ct-0akjahmgqhu4uct-0aqx5t0pgfzbgct-0ary07xiajwx4ct-0attesnjqy2cxct-0biqnokj25gkdct-0bpxsrtu16igpct-0c2g2npbyyrnyct-0c38gftq56zj6ct-0cupn1txog5tkct-0cyqd7laxyhlmct-0el2j07llrxs7ct-0erkoad6uyvvgct-0ffvihqwjvqj1ct-0fpjlxa808sh2ct-0fqo03yizfnw6ct-0g690ekkyfm79ct-0h3p576mj4rqmct-0hahohe17csncct-0hi7z7tyikjf6ct-0hu3q3957aghjct-0idxb0xsg1ui6ct-0ikpop8zqhkxgct-0ixp4ch2tiu04ct-0jb01cofkhwk1ct-0k4b96aatyqglct-0kbey7hb00atpct-0loed9dzig1zect-0lqruajvhwsbkct-0ltm873rsebx9ct-0mss4i7neuj7fct-0ntpkt9wntdfsct-0o4zi9bzg74lpct-0pgvtw5rpcsb6ct-0q0bic0ywqk6cct-0q43l40hxrzumct-0qbikxr9okwvyct-0rmgrnr9w8mzhct-0tmpmp1wpgkr9ct-0tpbr6lfa3zngct-0ttx8eh3ice91ct-0ulaleq7ohuyqct-0vdiy51oyrhhmct-0vevjppj9eta4ct-0vfx8rwd1mcnnct-0vzsr2nyraedlct-0wglhholzo0uwct-0wspy4o646g9pct-0x6dylrnfjgz5ct-0xdawir96cy7kct-0xi6q7uwuwrqect-0xqwmtn1hfh8uct-0ywnhc8e5k9z5ct-0z8w5t4t1ti5mct-0zko7t3rk2efbct-0zzf0fjz76jmbct-1078jhyxq32dpct-10nh4ztyxu8kzct-10yi1sd9nst1cct-111fhplhx9axect-111r1yayblnw4ct-117rmp64d5mvbct-128mp7mbxobd0ct-128svy9nn2yj8ct-12amsdz909cfhct-12lyw7otiyr6fct-12w49boaiwtzpct-13lk0noacn6uact-13swbwdxg106zct-13xvbj5pqg253ct-14027q0sjyt1hct-1404e21baa2oxct-14v49adibs4dbct-14yjom3kvpinuct-15gyrpzjx1yacct-15mazjj88xc69ct-16c7yzpkb2a6nct-16pknsfa8lul7ct-16xg8qguovg2wct-1706xvvk6j9hfct-17cj84y7632o6ct-17vnu10suy631ct-17w6f6kzf6w51ct-1895yr1p87noqct-18fzkt86jmw1sct-18r16ldqil6w9ct-18rsjua1zosvoct-18weo4vv83ynkct-1962s5oczal9zct-1976sir132k22ct-199h35t7uz6jlct-19f40lfm5umy8ct-19fdy7np55xiuct-1a1zzgi2nb83dct-1a68ck03fn98rct-1aqsjf86w6vxgct-1ax768xtu8c9qct-1ay83wy4vxa3kct-1b8fudnqq7m8rct-1c0jrxd3su5oect-1c7ch8z5phrjpct-1d2fml15b9ethct-1d55pi44ff21uct-1d84keiri1jhgct-1dmlg9g1l91h6ct-1e0xmuy1diafqct-1e1xtak34nx76ct-1eft8s6vdhz0wct-1eiczxw8ihc18ct-1elb1vtam0ka5ct-1erytvmumckoact-1ezarc5xph3tqct-1f9hi4bephqa9ct-1fzddqrr20c2ict-1g6x4ev0hnvfnct-1gi93jhvj28egct-1h1tuxn2oxrtfct-1h5xgl9cr4bzyct-1hzofpphabs3ict-1i20abktsm05vct-1icghmq38rnsnct-1icrtx8ydvdwect-1j3503fres5a5ct-1jy64y7yt71m4ct-1k3oui719dcjuct-1ksyoxreh35tuct-1malj7snzxrkrct-1mrqxscu15apzct-1n323w7eu27u9ct-1n9gfnog5x7flct-1nusoameibz5pct-1o1x2itfd6rk8ct-1opjmhuddw194ct-1oxx2g2d7hc90ct-1pqxczuw5uwu6ct-1pvlhug439gl2ct-1pybwg08h8qszct-1q8q56cmwqj9mct-1r19m51jeijlkct-1r1vbr8ahr156ct-1rexstryxye1bct-1taxucdyi84iyct-1urj94c3hdfu5ct-1v9g9n30woc8hct-1vbv99ko7bsrqct-1vd3y4ygbqmfkct-1vjbacfr4ufdvct-1vq0f289r36ayct-1vrnixswq1uwfct-1w8z66n899dctct-1wle0ai4en6kmct-1x66wvkjw2zp5ct-1xymw2hi94k1kct-1yq7hhqse71ygct-1yqy4frl5s8y8ct-1zdasmc2ewzrsct-2019s9y3nfml4ct-2052miu12d8fnct-20san5sgtwd9ect-211l2gxvsrrhyct-220bdb8blaixfct-22cbvc1yujhecct-24pi85mjtza8kct-24rl68y07m769ct-257p9zjk14ijact-25v6r7t8gvkq5ct-26swglg6rodztct-26vhhlj9jmlpfct-2781aqd6f6svsct-27apldkhqr0olct-27jjy5wnrfef2ct-27tuth19k52b4ct-281dpwh9tqnanct-281et7bs9ep4sct-28yh0fnzhubnhct-2aaaqid7asjy6ct-2b9q8339bj2sact-2bxelbn765ivect-2c7ve50jost1vct-2d55p1d7z6w3dct-2dphvdy1krpj6ct-2edc3sd1sqmrbct-2eof6j3mlcwhfct-2epp05svrlwodct-2fqmbyud166z9ct-2fuzb2l7hckrjct-2fzh1wckpl7f5ct-2gd0u847qd9d2ct-2ha68tpd7nr3yct-2hh93eyzmwbkdct-2hhqzgxvkcig8ct-2hhud2lx01tq7ct-2hxcllf1b4ey0ct-2hyozbpa0sx0mct-2iz9nvw8zlhstct-2j7q1hgf26x5cct-2jndrh7uit8ufct-2jvzjwunghrhyct-2lt0jeydeumpect-2mf36chtp1ejhct-2murl5xzbxoxfct-2ni31oyto1i5kct-2nyeguspp2g1lct-2o1knqxw39mkcct-2oxl37nphsrjzct-2p93tyd5angmict-2paw0y79kvr3lct-2pbqoffhclpekct-2pfarpvczsstrct-2pkdckieh62psct-2ptn20pq7ur3xct-2pxyajek47am2ct-2q5azjd8p1ag5ct-2qhl8j1pjnbgnct-2qjqju7h67s7wct-2qldv4h9osmauct-2qsgbfmrw92zwct-2r2bffv9u6q4mct-2r9xvd3sdsic0ct-2rfzmkm6ugighct-2rnjx5yd6jgptct-2svg4k2fqi4akct-2syhk4sr7cvywct-2taqdgegqthjrct-2tqi3kjcusen4ct-2tylseo8rxfscct-2u5rcyv5h34znct-2uimt36z7j6vnct-2utx36abv83pvct-2uw99b8hpncnuct-2uzbqr7x7mekdct-2v82sp4np40kict-2w3rbmnny1qpoct-2wlfo2jxj2rkjct-2wllq61djysxzct-2wrvu4kca9xkyct-2x14cv67uym46ct-2xd2anlb5hbzoct-2y6q4vco4miypct-2yja7ihh30plyct-2z60dyvto9g6cct-2zebb2czoxpjdct-2zqwr34epwzx1ct-2zxya20wmf5bfct-3047c34zuvswhct-309eozh6lpkr8ct-30bfiwxjku1nuct-30ecvfi3tq4k3ct-30j78u6li9aqrct-31eb7rrxb7qjuct-31eyj2hlvqjwuct-32r1igwrwag4ict-33ste5yc7hprsct-34alumbtv2b9pct-34jldf2qihaicct-34sxfo53yuzahct-35p977vul06dfct-361tlo1k7339xct-361vpyun9a9ddct-369odosk0pd9wct-36cn2avfrrj9vct-36emj2uapfbu8ct-36jq7gvwyty8hct-36x3u7v2oklwdct-36zubwzxp44a4ct-379uwo67vbvngct-37bq2l9c8fzxvct-37kcp2v1mriu6ct-37qquo9wbpa8xct-37vqa0oggka3qct-38s4s4tm4ic4uct-38xcr0q86k9lhct-3929xwf222jrict-393q3yaq9ewlmct-39c5qiasbe4hect-3cp96z7r065e4ct-3cx7we852p3afct-3d0lrfb8eckuuct-3da2lxapopb86ct-3dfnglm4ombbsct-3dfubbpesm2v9ct-3dgbnh6gpst4dct-3dpd8mdd9jn1rct-3dscwaeyi6cupct-3e3h8u0sp5z80ct-3e3prksxmdhw8ct-3ebotglihggsect-3eutt7grkict4ct-3fi2cx8b83iuact-3g6fq83nxg1a7ct-3g9dbtun44malct-3gf8dolbo8x9pct-3gg0id58rn82hct-3gjfayulf5hhsct-3glr80c15rp7zct-3hox8uwjgze1fct-3j2zstluz6dxqct-3jo8yccbin4itct-3jrqmeq7j0wkect-3jx80fquylzhfct-3kh1wiizlne1ict-3kinq0u4l33zfct-3kl2d1u40lrj8ct-3l14e139i5p50ct-3lkbpansfv69kct-3ll9hnadql9s1ct-3memthlcmvc1bct-3mlsibqhugrf1ct-3mvvt2zkyveqjct-3nba0wtdugnanct-3nmhh0qr338q6ct-3oafsdbzjtuqpct-3ovo7px2vsa6nct-3oy53m1qzl2s5ct-3pc215bnwb6p7ct-3pwbixz27n3tnct-3qe6io8t6jtnyct-3r2ckznmt0a59ct-3rcl9u1k017wuct-3rd4781c2nnhpct-3rk1nl1ufn5g3ct-3rqqu43krekbyct-3s3ik03uzw19tct-3sk74t8igor0sct-3skaisgnq0pf8ct-3t4lifos8tu58ct-3u61cd4edns0xct-3u9yd8jznb2zdct-3va4bkrxb9z42ct-3vfxkiudtovm9ct-3w4lxdl3pqxob +ct-00tlkda4242x7ct-00zr0b0ozlcn3ct-0176f0n99vcpsct-01zl37gmuk4q2ct-02ocqy2i0jx3tct-02u0hoaa9gratct-03ms1d7xrck8wct-03mv2mypai537ct-03t7kvuwx6rgrct-03ytgoevfebjrct-042luqo63j4mxct-046aizcwg5idfct-04gzyy008v1bgct-054ysptoo4gykct-059ewa92tc2i1ct-05muqzievnxk5ct-05yb337abq3x5ct-063qsm82cfxu6ct-06bwg93ukgg8tct-06mjngx5flwtoct-07jzw8bzd2on7ct-08avsj2e9mc7gct-08sgdn5zowyylct-09qbhy7kvtxqwct-09t6q7j9v5hrnct-0ah3gwb9seqk2ct-0akjahmgqhu4uct-0aqx5t0pgfzbgct-0ary07xiajwx4ct-0attesnjqy2cxct-0biqnokj25gkdct-0bpxsrtu16igpct-0c2g2npbyyrnyct-0c38gftq56zj6ct-0cupn1txog5tkct-0cyqd7laxyhlmct-0el2j07llrxs7ct-0erkoad6uyvvgct-0ffvihqwjvqj1ct-0fpjlxa808sh2ct-0fqo03yizfnw6ct-0g690ekkyfm79ct-0h3p576mj4rqmct-0hahohe17csncct-0hi7z7tyikjf6ct-0hu3q3957aghjct-0idxb0xsg1ui6ct-0ikpop8zqhkxgct-0ixp4ch2tiu04ct-0jb01cofkhwk1ct-0k4b96aatyqglct-0kbey7hb00atpct-0loed9dzig1zect-0lqruajvhwsbkct-0ltm873rsebx9ct-0mss4i7neuj7fct-0ntpkt9wntdfsct-0o4zi9bzg74lpct-0p1oqt4xcp1cvct-0pgvtw5rpcsb6ct-0q0bic0ywqk6cct-0q43l40hxrzumct-0qbikxr9okwvyct-0rmgrnr9w8mzhct-0tmpmp1wpgkr9ct-0tpbr6lfa3zngct-0ttx8eh3ice91ct-0ulaleq7ohuyqct-0vdiy51oyrhhmct-0vevjppj9eta4ct-0vfx8rwd1mcnnct-0vzsr2nyraedlct-0wglhholzo0uwct-0wspy4o646g9pct-0x6dylrnfjgz5ct-0xdawir96cy7kct-0xi6q7uwuwrqect-0xqwmtn1hfh8uct-0ywnhc8e5k9z5ct-0z8w5t4t1ti5mct-0zko7t3rk2efbct-0zzf0fjz76jmbct-1078jhyxq32dpct-10nh4ztyxu8kzct-10yi1sd9nst1cct-111fhplhx9axect-111r1yayblnw4ct-117rmp64d5mvbct-128mp7mbxobd0ct-128svy9nn2yj8ct-12amsdz909cfhct-12lyw7otiyr6fct-12w49boaiwtzpct-13lk0noacn6uact-13swbwdxg106zct-13xvbj5pqg253ct-14027q0sjyt1hct-1404e21baa2oxct-14v49adibs4dbct-14yjom3kvpinuct-15gyrpzjx1yacct-15mazjj88xc69ct-16c7yzpkb2a6nct-16pknsfa8lul7ct-16xg8qguovg2wct-1706xvvk6j9hfct-17cj84y7632o6ct-17vnu10suy631ct-17w6f6kzf6w51ct-1895yr1p87noqct-18fzkt86jmw1sct-18r16ldqil6w9ct-18rsjua1zosvoct-18weo4vv83ynkct-1962s5oczal9zct-1976sir132k22ct-199h35t7uz6jlct-19f40lfm5umy8ct-19fdy7np55xiuct-1a1zzgi2nb83dct-1a68ck03fn98rct-1aqsjf86w6vxgct-1ax768xtu8c9qct-1ay83wy4vxa3kct-1b8fudnqq7m8rct-1c0jrxd3su5oect-1c7ch8z5phrjpct-1d2fml15b9ethct-1d55pi44ff21uct-1d84keiri1jhgct-1dmlg9g1l91h6ct-1e0xmuy1diafqct-1e1xtak34nx76ct-1eft8s6vdhz0wct-1eiczxw8ihc18ct-1elb1vtam0ka5ct-1erytvmumckoact-1ezarc5xph3tqct-1f9hi4bephqa9ct-1fzddqrr20c2ict-1g6x4ev0hnvfnct-1gi93jhvj28egct-1h1tuxn2oxrtfct-1h5xgl9cr4bzyct-1hzofpphabs3ict-1i20abktsm05vct-1icghmq38rnsnct-1icrtx8ydvdwect-1j3503fres5a5ct-1jy64y7yt71m4ct-1k3oui719dcjuct-1ksyoxreh35tuct-1malj7snzxrkrct-1mrqxscu15apzct-1n323w7eu27u9ct-1n9gfnog5x7flct-1nusoameibz5pct-1o1x2itfd6rk8ct-1opjmhuddw194ct-1oxx2g2d7hc90ct-1pqxczuw5uwu6ct-1pvlhug439gl2ct-1pybwg08h8qszct-1q8q56cmwqj9mct-1r19m51jeijlkct-1r1vbr8ahr156ct-1rexstryxye1bct-1taxucdyi84iyct-1urj94c3hdfu5ct-1v9g9n30woc8hct-1vbv99ko7bsrqct-1vd3y4ygbqmfkct-1vjbacfr4ufdvct-1vq0f289r36ayct-1vrnixswq1uwfct-1w8z66n899dctct-1wle0ai4en6kmct-1x66wvkjw2zp5ct-1xymw2hi94k1kct-1yq7hhqse71ygct-1yqy4frl5s8y8ct-1zdasmc2ewzrsct-2019s9y3nfml4ct-2052miu12d8fnct-20san5sgtwd9ect-211l2gxvsrrhyct-220bdb8blaixfct-22cbvc1yujhecct-24pi85mjtza8kct-24rl68y07m769ct-257p9zjk14ijact-25v6r7t8gvkq5ct-26swglg6rodztct-26vhhlj9jmlpfct-2781aqd6f6svsct-27apldkhqr0olct-27jjy5wnrfef2ct-27tuth19k52b4ct-281dpwh9tqnanct-281et7bs9ep4sct-28yh0fnzhubnhct-2aaaqid7asjy6ct-2b9q8339bj2sact-2bxelbn765ivect-2c7ve50jost1vct-2d55p1d7z6w3dct-2dphvdy1krpj6ct-2edc3sd1sqmrbct-2eof6j3mlcwhfct-2epp05svrlwodct-2fqmbyud166z9ct-2fuzb2l7hckrjct-2fzh1wckpl7f5ct-2gd0u847qd9d2ct-2ha68tpd7nr3yct-2hh93eyzmwbkdct-2hhqzgxvkcig8ct-2hhud2lx01tq7ct-2hxcllf1b4ey0ct-2hyozbpa0sx0mct-2iz9nvw8zlhstct-2j7q1hgf26x5cct-2jndrh7uit8ufct-2jvzjwunghrhyct-2lt0jeydeumpect-2mf36chtp1ejhct-2murl5xzbxoxfct-2ni31oyto1i5kct-2nyeguspp2g1lct-2o1knqxw39mkcct-2oxl37nphsrjzct-2p93tyd5angmict-2paw0y79kvr3lct-2pbqoffhclpekct-2pfarpvczsstrct-2pkdckieh62psct-2ptn20pq7ur3xct-2pxyajek47am2ct-2q5azjd8p1ag5ct-2qhl8j1pjnbgnct-2qjqju7h67s7wct-2qldv4h9osmauct-2qsgbfmrw92zwct-2r2bffv9u6q4mct-2r9xvd3sdsic0ct-2rfzmkm6ugighct-2rnjx5yd6jgptct-2sav5hzk5twk4ct-2svg4k2fqi4akct-2syhk4sr7cvywct-2taqdgegqthjrct-2tqi3kjcusen4ct-2tylseo8rxfscct-2u5rcyv5h34znct-2uimt36z7j6vnct-2utx36abv83pvct-2uw99b8hpncnuct-2uzbqr7x7mekdct-2v82sp4np40kict-2w3rbmnny1qpoct-2wlfo2jxj2rkjct-2wllq61djysxzct-2wrvu4kca9xkyct-2x14cv67uym46ct-2xd2anlb5hbzoct-2y6q4vco4miypct-2yja7ihh30plyct-2z60dyvto9g6cct-2zebb2czoxpjdct-2zqwr34epwzx1ct-2zxya20wmf5bfct-3047c34zuvswhct-309eozh6lpkr8ct-30bfiwxjku1nuct-30ecvfi3tq4k3ct-30j78u6li9aqrct-31eb7rrxb7qjuct-31eyj2hlvqjwuct-32r1igwrwag4ict-33ste5yc7hprsct-34alumbtv2b9pct-34jldf2qihaicct-34sxfo53yuzahct-35p977vul06dfct-361tlo1k7339xct-361vpyun9a9ddct-369odosk0pd9wct-36cn2avfrrj9vct-36emj2uapfbu8ct-36jq7gvwyty8hct-36x3u7v2oklwdct-36zubwzxp44a4ct-379uwo67vbvngct-37bq2l9c8fzxvct-37kcp2v1mriu6ct-37qquo9wbpa8xct-37vqa0oggka3qct-38s4s4tm4ic4uct-38xcr0q86k9lhct-3929xwf222jrict-393q3yaq9ewlmct-39c5qiasbe4hect-3cp96z7r065e4ct-3cx7we852p3afct-3d0lrfb8eckuuct-3da2lxapopb86ct-3dfnglm4ombbsct-3dfubbpesm2v9ct-3dgbnh6gpst4dct-3dpd8mdd9jn1rct-3dscwaeyi6cupct-3e3h8u0sp5z80ct-3e3prksxmdhw8ct-3ebotglihggsect-3eutt7grkict4ct-3fi2cx8b83iuact-3g6fq83nxg1a7ct-3g9dbtun44malct-3gf8dolbo8x9pct-3gg0id58rn82hct-3gjfayulf5hhsct-3glr80c15rp7zct-3hox8uwjgze1fct-3j2zstluz6dxqct-3jo8yccbin4itct-3jrqmeq7j0wkect-3jx80fquylzhfct-3k67klld7cimjct-3kh1wiizlne1ict-3kinq0u4l33zfct-3kl2d1u40lrj8ct-3l14e139i5p50ct-3lkbpansfv69kct-3ll9hnadql9s1ct-3memthlcmvc1bct-3mlsibqhugrf1ct-3mvvt2zkyveqjct-3nba0wtdugnanct-3nmhh0qr338q6ct-3oafsdbzjtuqpct-3ovo7px2vsa6nct-3oy53m1qzl2s5ct-3pc215bnwb6p7ct-3pwbixz27n3tnct-3qe6io8t6jtnyct-3r2ckznmt0a59ct-3rcl9u1k017wuct-3rd4781c2nnhpct-3rk1nl1ufn5g3ct-3rqqu43krekbyct-3s3ik03uzw19tct-3sk74t8igor0sct-3skaisgnq0pf8ct-3t4lifos8tu58ct-3u61cd4edns0xct-3u9yd8jznb2zdct-3va4bkrxb9z42ct-3vfxkiudtovm9ct-3w4lxdl3pqxob @@ -1093 +1093 @@ Change type schemas specify the execution input parameters for a change type. - "pattern": "^(arn:aws:kms:[a-z0-9-]+:[0-9]{12}:key/){0,1}[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$|^$" + "pattern": "^(arn:(aws|aws-cn|aws-us-gov):kms:[a-z0-9-]+:[0-9]{12}:key/){0,1}(mrk-[a-f0-9]{32}|[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12})$|^$" @@ -4354 +4354 @@ Change type schemas specify the execution input parameters for a change type. - "pattern": "^([a-z0-9]+(-[a-z0-9]+)*\\.)+[a-z]{2,255}$" + "pattern": "^[a-z0-9!\"#$%&'()*+,\\-:;<=>?@\\[\\\\\\]^_`{|}\\.~]+$" @@ -7417,0 +7418,71 @@ Change type schemas specify the execution input parameters for a change type. +## Schema for Change Type ct-0p1oqt4xcp1cv + +###### Classifications: + + * [Management | Advanced stack components | RDS database stack | Update parameter group](./management-advanced-rds-database-stack-update-parameter-group.html) + + + + + + { + "$schema": "http://json-schema.org/draft-04/schema#", + "name": "Update DB Instance or Cluster Parameter Group.", + "description": "Change the RDS parameter group. The RDS instance or cluster can be standalone or belong to a CloudFormation stack. In the latter case, an update might cause stack drift. When you associate a new DB parameter group with a DB instance or DB cluster, you must reboot the instance or cluster to apply the modified static and dynamic parameters. Reboot the RDS instance or cluster during your preferred maintenance window.", + "type": "object", + "properties": { + "DocumentName": { + "description": "Must be AWSManagedServices-UpdateDBParameterGroup.", + "type": "string", + "enum": [ + "AWSManagedServices-UpdateDBParameterGroup" + ], + "default": "AWSManagedServices-UpdateDBParameterGroup" + }, + "Region": { + "description": "The AWS Region in which the AWS resource is located, in the form us-east-1.", + "type": "string", + "pattern": "^([a-z]{2}((-gov))?-[a-z]+-\\d{1})$" + }, + "Parameters": { + "type": "object", + "properties": { + "DBArn": { + "description": "The identifier of the RDS instance or cluster.", + "type": "string", + "pattern": "^arn:(aws|aws-cn|aws-us-gov):rds:([a-z]{2}((-gov))?-[a-z]+-\\d{1}):[0-9]{12}:(db|cluster):(?!([mM][cC]|[aA][mM][sS]|[Aa][Ww][Ss][Mm][Ss])-)[a-zA-Z]{1}(?!.*--)(?!.*-$)[A-Za-z0-9-]{0,62}$" + }, + "ParameterGroupName": { + "description": "The name of the parameter group. When you associate a new DB parameter group with a DB instance or cluster, RDS applies the modified static and dynamic parameters only after the DB instance or cluster is rebooted. If a DB instance or instances in the cluster aren't using the latest changes to the associated DB parameter group, the AWS Management Console shows the DB parameter group with the status of pending-reboot.", + "type": "string", + "pattern": "^(?!.*--)[a-zA-Z][-a-zA-Z0-9.]{0,253}(?<!-)$" + } + }, + "metadata": { + "ui:order": [ + "DBArn", + "ParameterGroupName" + ] + }, + "required": [ + "DBArn", + "ParameterGroupName" + ], + "additionalProperties": false + } + }, + "metadata": { + "ui:order": [ + "DocumentName", + "Region", + "Parameters" + ] + }, + "required": [ + "DocumentName", + "Region", + "Parameters" + ], + "additionalProperties": false + } + @@ -34458,0 +34530,64 @@ Change type schemas specify the execution input parameters for a change type. +## Schema for Change Type ct-2sav5hzk5twk4 + +###### Classifications: + + * [Management | Advanced stack components | Site-to-Site VPN | Replace tunnel (managed automation)](./management-advanced-site-to-site-vpn-replace-tunnel-managed-automation.html) + + + + + + { + "$schema": "http://json-schema.org/draft-04/schema#", + "name": "Replace Site-to-Site VPN Tunnel", + "description": "Replace an existing Site-to-Site VPN tunnel, optionally applying maintenance.", + "type": "object", + "properties": { + "Region": { + "description": "(Required) The AWS Region of the Site-to-Site VPN, in the format of the Region code. For example, us-east-1.", + "type": "string", + "pattern": "^([a-z]{2}((-gov))?-[a-z]+-\\d{1})$" + }, + "VpnId": { + "description": "(Required) The ID of the VPN connection that contains the tunnel to replace. In the format vpn-01234567890abcdef.", + "type": "string", + "pattern": "^vpn-[a-z0-9]{17}$" + }, + "VpnTunnelOutsideIpAddress": { + "description": "(Required) The outside IP address of the VPN tunnel to replace.", + "type": "string", + "pattern": "^(25[0-5]|2[0-4]\\d|1\\d{2}|[1-9]\\d?|0)(\\.(25[0-5]|2[0-4]\\d|1\\d{2}|[1-9]\\d?|0)){3}$" + }, + "ApplyPendingMaintenance": { + "description": "Indicates whether to apply pending maintenance during the tunnel replacement.", + "type": "boolean", + "default": true + }, + "Priority": { + "description": "The priority of the request. See AMS \"RFC scheduling\" documentation for a definition of the priorities.", + "type": "string", + "enum": [ + "Low", + "Medium", + "High" + ], + "default": "Medium" + } + }, + "metadata": { + "ui:order": [ + "Region", + "VpnId", + "VpnTunnelOutsideIpAddress", + "ApplyPendingMaintenance", + "Priority" + ] + }, + "additionalProperties": false, + "required": [ + "Region", + "VpnId", + "VpnTunnelOutsideIpAddress" + ] + } + @@ -44686,0 +44822,92 @@ Change type schemas specify the execution input parameters for a change type. +## Schema for Change Type ct-3k67klld7cimj + +###### Classifications: + + * [Management | Directory Service | DNS | Remediate DNS scavenging issue](./management-directory-dns-remediate-dns-scavenging-issue.html) + + + + + + { + "$schema": "http://json-schema.org/draft-04/schema#", + "name": "Remediate DNS Scavenging Issue for Failover Cluster", + "description": "Remediates DNS scavenging issues for Windows failover clusters by updating permissions on CNO and VCO DNS records. Grants 'Read Permissions' to Everyone on CNO and VCO DNS records, 'Reset Password' permission to Everyone on the CNO computer object, and 'Full Control' permissions to the CNO computer object and specified cluster node computer objects on all CNO and VCO DNS records. This ensures that DNS records associated with the failover cluster are not inadvertently removed during DNS scavenging operations.", + "type": "object", + "properties": { + "DocumentName": { + "description": "Must be AWSManagedServices-UpdateClusterNodeRecordPermissions-Admin.", + "type": "string", + "enum": [ + "AWSManagedServices-UpdateClusterNodeRecordPermissions-Admin" + ], + "default": "AWSManagedServices-UpdateClusterNodeRecordPermissions-Admin" + }, + "Region": { + "description": "The AWS Region in which the resource is located, in the form us-east-1.", + "type": "string", + "pattern": "^([a-z]{2}((-gov))?-[a-z]+-\\d{1})$" + }, + "Parameters": { + "type": "object", + "properties": { + "ClusterCNOName": { + "description": "Name of the Cluster Name Object (CNO) whose DNS record permissions will be updated to allow the CNO computer object and cluster nodes full control.", + "type": "array", + "items": { + "type": "string", + "pattern": "^[a-zA-Z0-9-_]{1,63}$" + }, + "maxItems": 1 + }, + "ClusterNodeComputerNames": { + "description": "Names of the cluster node computer objects to be granted full control permissions on the CNO and VCO DNS records.", + "type": "array", + "items": { + "type": "string", + "pattern": "^[A-Za-z0-9-_]{1,63}$" + }, + "minItems": 1,