AWS cli documentation change
Summary
Updated encryption documentation and added new durability parameters
Security assessment
The changes clarify encryption-at-rest behavior and introduce new StorageEncryptionType field to document encryption methods (none, sse-elasticache, sse-kms). While this enhances security documentation by explaining encryption states and key management options, there's no evidence of a specific security vulnerability being addressed.
Diff
diff --git a/cli/latest/reference/elasticache/create-replication-group.md b/cli/latest/reference/elasticache/create-replication-group.md index 19154830a..8e7e07522 100644 --- a//cli/latest/reference/elasticache/create-replication-group.md +++ b//cli/latest/reference/elasticache/create-replication-group.md @@ -15 +15 @@ - * [AWS CLI 2.34.57 Command Reference](../../index.html) » + * [AWS CLI 2.34.61 Command Reference](../../index.html) » @@ -122,0 +123 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/elasti + [--durability <value>] @@ -539 +540 @@ Syntax: -> A flag that enables encryption at rest when set to `true` . +> A flag that enables encryption at-rest on the replication group when set to `true` . In some cases, encryption at-rest may be enabled even when this value is false. Use `StorageEncryptionType` to view the effective encryption state of a cluster. @@ -541,3 +542 @@ Syntax: -> You cannot modify the value of `AtRestEncryptionEnabled` after the replication group is created. To enable encryption at rest on a replication group you must set `AtRestEncryptionEnabled` to `true` when you create the replication group. -> ->> **Required:** Only available when creating a replication group in an Amazon VPC using Valkey `7.2` and later, Redis OSS version `3.2.6` , or Redis OSS `4.x` and later. +> You cannot modify the value of `AtRestEncryptionEnabled` after the replication group is created. @@ -728,0 +728,13 @@ JSON Syntax: +`--durability` (string) + +> Specifies the durability setting for the replication group. When set to `default` , the service determines the effective durability based on the engine version, cluster mode, and other parameters. The resolved setting is reflected in the `EffectiveDurability` property of the replication group. For more information, see [Durability](http://docs.aws.amazon.com/AmazonElastiCache/latest/dg/Durability.html) . +> +> Possible values: +> +> * `default` +> * `async` +> * `sync` +> * `disabled` +> + + @@ -1255 +1267 @@ ReplicationGroup -> (structure) ->> A flag that enables encryption at-rest when set to `true` . +>> A flag that enables encryption at-rest on the cluster when set to `true` . In some cases, encryption at-rest may be enabled even when this value is false. Use `StorageEncryptionType` to view the effective encryption state of a cluster. @@ -1257 +1269 @@ ReplicationGroup -> (structure) ->> You cannot modify the value of `AtRestEncryptionEnabled` after the cluster is created. To enable encryption at-rest on a cluster you must set `AtRestEncryptionEnabled` to `true` when you create a cluster. +>> You cannot modify the value of `AtRestEncryptionEnabled` after the cluster is created. @@ -1259,3 +1271 @@ ReplicationGroup -> (structure) ->>> **Required:** Only available when creating a replication group in an Amazon VPC using Redis OSS version `3.2.6` , `4.x` or later. ->> ->> Default: `false` +>> Default: `true` when using Valkey, `false` when using Redis OSS @@ -1271,0 +1282,12 @@ ReplicationGroup -> (structure) +> +> StorageEncryptionType -> (string) +> +>> Indicates the type of encryption for data stored at rest in the replication group. The value is `none` if at-rest encryption is not enabled, `sse-elasticache` if an ElastiCache service-managed key is used, or `sse-kms` if a customer-managed KMS key is used. +>> +>> Possible values: +>> +>> * `none` +>> * `sse-elasticache` +>> * `sse-kms` +>> + @@ -1436,0 +1459,25 @@ ReplicationGroup -> (structure) +> +> Durability -> (string) +> +>> The durability setting of the replication group. For more information, see [Durability](http://docs.aws.amazon.com/AmazonElastiCache/latest/dg/Durability.html) . +>> +>> Possible values: +>> +>> * `default` +>> * `async` +>> * `sync` +>> * `disabled` +>> + +> +> EffectiveDurability -> (string) +> +>> The effective durability of the replication group. When `Durability` is set to `default` , the service resolves the actual durability based on the engine version, cluster mode, and other parameters. This field reflects the resolved value. For more information, see [Configuring Durability](http://docs.aws.amazon.com/AmazonElastiCache/latest/dg/ConfiguringDurability.html) . +>> +>> Possible values: +>> +>> * `async` +>> * `sync` +>> * `disabled` +>> + @@ -1448 +1495 @@ ReplicationGroup -> (structure) - * [AWS CLI 2.34.57 Command Reference](../../index.html) » + * [AWS CLI 2.34.61 Command Reference](../../index.html) »