AWS AmazonRDS documentation change
Summary
Updated terminology from 'master account' to 'master user', clarified object naming case requirements, and added explicit privilege values documentation
Security assessment
The change improves privilege management documentation by specifying valid privilege values (SELECT, EXECUTE, ALL) but doesn't address any specific vulnerability. Enhanced documentation helps users properly revoke privileges, reducing misconfiguration risks.
Diff
diff --git a/AmazonRDS/latest/UserGuide/Appendix.Oracle.CommonDBATasks.RevokePrivileges.md b/AmazonRDS/latest/UserGuide/Appendix.Oracle.CommonDBATasks.RevokePrivileges.md index 897ffb397..d8439c818 100644 --- a//AmazonRDS/latest/UserGuide/Appendix.Oracle.CommonDBATasks.RevokePrivileges.md +++ b//AmazonRDS/latest/UserGuide/Appendix.Oracle.CommonDBATasks.RevokePrivileges.md @@ -9 +9 @@ -To revoke privileges on a single object, use the Amazon RDS procedure `rdsadmin.rdsadmin_util.revoke_sys_object`. The procedure only revokes privileges that the master account has already been granted through a role or direct grant. +To revoke privileges on a single object, use the Amazon RDS procedure `rdsadmin.rdsadmin_util.revoke_sys_object`. The procedure only revokes privileges that the master user has already been granted through a role or direct grant. @@ -15 +15 @@ Parameter name | Data type | Default | Required | Description -`p_obj_name` | varchar2 | — | Yes | The name of the object to revoke privileges for. The object can be a directory, function, package, procedure, sequence, table, or view. Object names must be spelled exactly as they appear in `DBA_OBJECTS`. Most system objects are defined in upper case, so we recommend you try that first. +`p_obj_name` | varchar2 | — | Yes | The name of the object to revoke privileges for. The object can be a directory, function, package, procedure, sequence, table, or view. Object names must be spelled exactly as they appear in `DBA_OBJECTS`. Most system objects are defined in uppercase, so we recommend that you try that first. @@ -17 +17 @@ Parameter name | Data type | Default | Required | Description -`p_privilege` | varchar2 | null | Yes | — +`p_privilege` | varchar2 | null | Yes | The privilege to revoke. Valid values include `SELECT`, `EXECUTE`, and `ALL`.