AWS Security ChangesHomeSearch

AWS dms documentation change

Service: dms · 2026-04-19 · Documentation low

File: dms/latest/userguide/CHAP_Source.Oracle.md

Summary

Added detailed documentation about the limitation of Oracle identifiers longer than 30 bytes during CDC replication, explaining potential data loss and providing guidance on how to check and validate object names.

Security assessment

The change documents a known functional limitation in AWS DMS when using Oracle as a source. It warns of data loss during CDC replication for objects with identifiers exceeding 30 bytes. While data loss is a serious operational issue, the documentation does not frame it as a security vulnerability (e.g., unauthorized access, data breach, or exploitation). It provides guidance to avoid data loss but does not address security features or vulnerabilities.

Diff

diff --git a/dms/latest/userguide/CHAP_Source.Oracle.md b/dms/latest/userguide/CHAP_Source.Oracle.md
index 9ffcaa91a..305bcc4e9 100644
--- a//dms/latest/userguide/CHAP_Source.Oracle.md
+++ b//dms/latest/userguide/CHAP_Source.Oracle.md
@@ -869 +869,11 @@ The following limitations apply when using an Oracle database as a source for AW
-  * AWS DMS does not support long object names (over 30 bytes).
+  * AWS DMS does not support Oracle identifiers longer than 30 bytes during CDC replication. This limitation applies regardless of whether the Oracle source version supports extended identifiers.
+
+During full load, AWS DMS migrates objects with long identifiers successfully. However, during CDC, events for objects with identifiers exceeding 30 bytes are silently skipped without stopping the task. This can result in missing data on the target.
+
+This limitation applies to all identifier types in the migration scope, such as schemas, tables, views, columns, constraints, and primary keys.
+
+###### Note
+
+The 30-byte limit is measured in bytes, not characters. Identifiers that use multibyte character sets, such as UTF-8 encoded CJK characters, can exceed 30 bytes with fewer than 30 characters. For example, a 15-character Japanese identifier encoded in UTF-8 can require up to 45 bytes.
+
+To avoid data loss during CDC replication, verify that all identifiers in the migration scope are within the 30-byte limit. To check the byte length of an object name, use the Oracle built-in function `LENGTHB('`object-name`')`. Alternatively, run a premigration assessment to validate all objects in the migration scope. For more information, see [Validate the length of the object name included in the task scope](https://docs.aws.amazon.com/dms/latest/userguide/CHAP_Tasks.AssessmentReport.Oracle.html#CHAP_Tasks.AssessmentReport.Oracle.30ByteLimit).