AWS AmazonElastiCache documentation change
Summary
Modified documentation to state that for Valkey, the AtRestEncryptionEnabled parameter defaults to true if not specified (previously required explicit setting to true).
Security assessment
The change enhances security by making at-rest encryption default for Valkey, promoting secure-by-default configuration. This is a security improvement but doesn't address a specific disclosed vulnerability.
Diff
diff --git a/AmazonElastiCache/latest/dg/at-rest-encryption.md b/AmazonElastiCache/latest/dg/at-rest-encryption.md index cdca82d05..abc26cd2b 100644 --- a//AmazonElastiCache/latest/dg/at-rest-encryption.md +++ b//AmazonElastiCache/latest/dg/at-rest-encryption.md @@ -63 +63 @@ For more information, see [Supported node types](./CacheNodes.SupportedTypes.htm - * At-rest encryption is enabled by explicitly setting the parameter `AtRestEncryptionEnabled` to `true`. + * At-rest encryption is enabled by setting the parameter `AtRestEncryptionEnabled` to `true`. For Valkey, this parameter defaults to `true` if not specified.