AWS redshift documentation change
Summary
Clarified datashare association behavior, noting that when changing from individual namespaces to AWS account, all current and future namespaces get access, and when changing back, previously accessible namespaces lose access if not specified.
Security assessment
This change clarifies access control implications for data sharing, which has security implications for data exposure. It documents how namespace access changes affect security boundaries but doesn't indicate a specific security vulnerability.
Diff
diff --git a/redshift/latest/dg/consumer-account-admin.md b/redshift/latest/dg/consumer-account-admin.md index a8aa37386..b007b40ab 100644 --- a//redshift/latest/dg/consumer-account-admin.md +++ b//redshift/latest/dg/consumer-account-admin.md @@ -19 +19 @@ Sign in to the [https://console.aws.amazon.com/redshiftv2/](https://console.aws. -After the AWS account or specific namespaces are associated, the datashares become available for consumption. You can also change datashare association at any time. When changing association from individual namespaces to an AWS account, Amazon Redshift overwrites the namespaces with the AWS account information. When changing association from an AWS account to specific namespaces, Amazon Redshift overwrites the AWS account information with the namespace information. All namespaces in the account get access to the data. +After the AWS account or specific namespaces are associated, the datashares become available for consumption. You can also change datashare association at any time. When changing association from individual namespaces to an AWS account, Amazon Redshift overwrites the namespaces with the AWS account information. All namespaces in the account get access to the data, including any namespaces created after the association. When changing association from an AWS account to specific namespaces, Amazon Redshift overwrites the AWS account information with the namespace information. Namespaces which had access previously will lose access if not specified in the new association.