AWS AmazonRDS documentation change
Summary
Added clarification about Amazon RDS for Oracle DB instances during server certificate rotation, noting that while they receive notifications, they don't require restart but the database listener is restarted, causing brief errors for new connections.
Security assessment
This change documents the behavior of server certificate rotation for Oracle DB instances, which is a security feature (SSL/TLS certificate management). It clarifies operational impact but doesn't indicate a specific security vulnerability being addressed.
Diff
diff --git a/AmazonRDS/latest/UserGuide/USER_UpgradeDBInstance.Maintenance.md b/AmazonRDS/latest/UserGuide/USER_UpgradeDBInstance.Maintenance.md index c652ffd42..a021c86ac 100644 --- a//AmazonRDS/latest/UserGuide/USER_UpgradeDBInstance.Maintenance.md +++ b//AmazonRDS/latest/UserGuide/USER_UpgradeDBInstance.Maintenance.md @@ -123 +123 @@ The following maintenance actions apply to RDS DB instances: -Engines that support rotation without restart don't receive this notification. +Engines that support rotation without restart don't receive this notification. Amazon RDS for Oracle DB instances will receive this notification, but they don't require restart. Only the database listener is restarted during the server certificate rotation. Existing database connections are unaffected, but new connections will encounter errors for a brief period while the listener is restarted. See [Automatic server certificate rotation](./UsingWithRDS.SSL-certificate-rotation.html#UsingWithRDS.SSL-certificate-rotation-server-cert-rotation) for details.