AWS AmazonElastiCache medium security documentation change
Summary
Updated compatibility considerations document to add sections for Valkey 9.0, 8.1, 8.0 and restructured 7.2 content. Added detailed behavior changes for each major version including authentication order changes in 9.0.
Security assessment
The change documents that Valkey 9.0 now runs authentication checks before command validation (#1475). This prevents unauthenticated clients from discovering valid command names by returning authentication errors instead of 'unknown command' errors, reducing information leakage - a security hardening measure.
Diff
diff --git a/AmazonElastiCache/latest/dg/VersionManagementConsiderations-valkey.md b/AmazonElastiCache/latest/dg/VersionManagementConsiderations-valkey.md index ad4456389..4c6948a3d 100644 --- a//AmazonElastiCache/latest/dg/VersionManagementConsiderations-valkey.md +++ b//AmazonElastiCache/latest/dg/VersionManagementConsiderations-valkey.md @@ -7 +7 @@ -# Major engine version behavior and compatibility differences with Valkey +Valkey 9.0Valkey 8.1Valkey 8.0Valkey 7.2 @@ -9 +9 @@ -Valkey 7.2.6 has similar compatibility differences with previous versions of Redis OSS 7.2.4. For the most recent supported version of Valkey, see [Supported engines and versions](./VersionManagement.html#supported-engine-versions). +# Major version behavior and compatibility differences for Valkey @@ -11 +11,24 @@ Valkey 7.2.6 has similar compatibility differences with previous versions of Red -For more information on the Valkey 7.2 release, see [Redis OSS 7.2.4 Release Notes](https://github.com/valkey-io/valkey/blob/d2c8a4b91e8c0e6aefd1f5bc0bf582cddbe046b7/00-RELEASENOTES) (Valkey 7.2 includes all changes from Redis OSS up to version 7.2.4) and [Valkey 7.2 release notes](https://github.com/valkey-io/valkey/blob/7.2/00-RELEASENOTES) at Valkey on GitHub. +When upgrading to a new major Valkey version, review the following behavior changes that may affect your applications. + +## Valkey 9.0 + +Valkey 9.0 introduces the following potentially breaking behavior changes compared to Valkey 8.x: + + * Authentication checks run before command validation. Unauthenticated clients now get auth errors instead of "unknown command." ([#1475](https://github.com/valkey-io/valkey/pull/1475)) + + * Error messages in transactions include full command name (e.g., `CLIENT SETNAME` instead of `client`). ([#2286](https://github.com/valkey-io/valkey/pull/2286)) + + * `GEOSEARCH` shape error message now says "BYRADIUS, BYBOX and BYPOLYGON." ([#1809](https://github.com/valkey-io/valkey/pull/1809)) + + + + +For more information on the Valkey 9.0 release, see the [Valkey 9.0 release notes](https://github.com/valkey-io/valkey/blob/9.0/00-RELEASENOTES). + +## Valkey 8.1 + +Valkey 8.1 introduces zero potentially breaking behavior changes compared to Valkey 8.0. + +For more information on the Valkey 8.1 release, see the [Valkey 8.1 release notes](https://github.com/valkey-io/valkey/releases/tag/8.1.0). + +## Valkey 8.0 @@ -13 +36,22 @@ For more information on the Valkey 7.2 release, see [Redis OSS 7.2.4 Release Not -Here are the potentially breaking behavior changes between Valkey 7.2 and Redis OSS 7.1 (or 7.0): +Valkey 8.0 introduces the following potentially breaking behavior changes compared to Valkey 7.2: + + * Nested `MULTI` or `WATCH` inside a transaction now aborts the transaction. Previously silently ignored. ([#723](https://github.com/valkey-io/valkey/pull/723)) + + * `SCAN` no longer returns lazily expired keys. ([#501](https://github.com/valkey-io/valkey/pull/501)) + + * `BITCOUNT` and `BITPOS` return errors instead of zero for invalid arguments on non-existing keys. ([Redis#11734](https://github.com/redis/redis/pull/11734)) + + * Default `repl-backlog-size` increased 1 MB → 10 MB. ([#911](https://github.com/valkey-io/valkey/pull/911)) + + * Streams use 8 extra bytes per entry. ([#688](https://github.com/valkey-io/valkey/pull/688)) + + * Error messages no longer include "Redis" branding. ([#206](https://github.com/valkey-io/valkey/pull/206)) + + + + +For more information on the Valkey 8.0 release, see the [Valkey 8.0 release notes](https://github.com/valkey-io/valkey/releases/tag/8.0.0-rc1). + +## Valkey 7.2 + +Valkey 7.2.6 has similar compatibility differences with previous versions of Redis OSS 7.2.4. Here are the potentially breaking behavior changes between Valkey 7.2 and Redis OSS 7.1 (or 7.0): @@ -23,0 +68,2 @@ Here are the potentially breaking behavior changes between Valkey 7.2 and Redis +For more information on the Valkey 7.2 release, see [Redis OSS 7.2.4 Release Notes](https://github.com/valkey-io/valkey/blob/d2c8a4b91e8c0e6aefd1f5bc0bf582cddbe046b7/00-RELEASENOTES) (Valkey 7.2 includes all changes from Redis OSS up to version 7.2.4) and [Valkey 7.2 release notes](https://github.com/valkey-io/valkey/blob/7.2/00-RELEASENOTES) at Valkey on GitHub. +