AWS AmazonRDS documentation change
Summary
Updated Oracle Management Agent documentation to support version 24.1.0.0.v1, removed specific Oracle Database 19c requirement, added OMS version requirement, updated storage requirements, and updated TLS configuration notes for the new agent version.
Security assessment
The change updates feature compatibility and version support. It includes an update to the `MINIMUM_TLS_VERSION` configuration, specifying that the new agent version 24.1.0.0.v1 also requires TLS 1.2 when connecting to a 24.1 OMS host. This adds to security documentation by clarifying secure communication protocols for the new version, but does not indicate a response to a specific security incident.
Diff
diff --git a/AmazonRDS/latest/UserGuide/Oracle.Options.OEMAgent.md b/AmazonRDS/latest/UserGuide/Oracle.Options.OEMAgent.md index 084d3e7b1..80b55d3b2 100644 --- a//AmazonRDS/latest/UserGuide/Oracle.Options.OEMAgent.md +++ b//AmazonRDS/latest/UserGuide/Oracle.Options.OEMAgent.md @@ -36 +36 @@ Following are general requirements for using Management Agent: - * Your DB instance must run Oracle Database 19c (19.0.0.0). You can use either the CDB or non-CDB architecture. + * You can use either the CDB or non-CDB architecture. @@ -39,0 +40,2 @@ Following are general requirements for using Management Agent: + * Management Agent version 24.1.0.0.v1 requires OMS version 24.1. + @@ -49,0 +52,2 @@ Following are general requirements for using Management Agent: + * At least 8.5 GiB for OEM 24ai Release 1 + @@ -95 +99 @@ Configure a one-way firewall rule that allows traffic from the DB instance to th - * To connect OEM Management Agent version 13.5.0.0 (v1-v3) to a 24.1 OMS host, set `MINIMUM_TLS_VERSION` to use the TLS 1.2 protocol `TLSv1.2` in your configuration options. + * To connect OEM Management Agent version 13.5.0.0 (v1-v3) or 24.1.0.0.v1 to a 24.1 OMS host, set `MINIMUM_TLS_VERSION` to use the TLS 1.2 protocol `TLSv1.2` in your configuration options. @@ -127 +131 @@ Option setting | Required | Valid values | Description -**Version** (`AGENT_VERSION`) | Yes | `13.5.0.0.v3` `13.5.0.0.v2` `13.5.0.0.v1` `13.4.0.9.v2` `13.4.0.9.v1` `13.3.0.0.v2` `13.3.0.0.v1` `13.2.0.0.v3` `13.2.0.0.v2` `13.2.0.0.v1` `13.1.0.0.v1` | The version of the Management Agent software. The minimum supported version is `13.1.0.0.v1`. The AWS CLI option name is `OptionVersion`. +**Version** (`AGENT_VERSION`) | Yes | `24.1.0.0.v1` `13.5.0.0.v3` `13.5.0.0.v2` `13.5.0.0.v1` `13.4.0.9.v2` `13.4.0.9.v1` `13.3.0.0.v2` `13.3.0.0.v1` `13.2.0.0.v3` `13.2.0.0.v2` `13.2.0.0.v1` `13.1.0.0.v1` | The version of the Management Agent software. The minimum supported version is `13.1.0.0.v1`. The AWS CLI option name is `OptionVersion`. @@ -138 +142 @@ In the AWS GovCloud (US) Regions, 13.1 versions aren't available. -**MINIMUM_TLS_VERSION** | No | `TLSv1` (default), `TLSv1.2` | A value that specifies the minimum TLS version supported by the OEM Agent while the agent listens as a server. Desupported agent versions only support the `TLSv1` setting. To connect 13.5.0.0 (v1-v3) to a 24.1 OMS host, set this to `TLSv1.2`. +**MINIMUM_TLS_VERSION** | No | `TLSv1` (default), `TLSv1.2` | A value that specifies the minimum TLS version supported by the OEM Agent while the agent listens as a server. Desupported agent versions only support the `TLSv1` setting. To connect 13.5.0.0 (v1-v3) or 24.1.0.0.v1 to a 24.1 OMS host, set this to `TLSv1.2`.