AWS cli documentation change
Summary
Updated encryption documentation: clarified AtRestEncryptionEnabled behavior, added StorageEncryptionType field, and introduced Durability/EffectiveDurability fields
Security assessment
The changes enhance documentation about at-rest encryption features but don't indicate any security vulnerability being fixed. The added StorageEncryptionType field helps users verify encryption status, improving security visibility without addressing a specific security issue.
Diff
diff --git a/cli/latest/reference/elasticache/describe-replication-groups.md b/cli/latest/reference/elasticache/describe-replication-groups.md index e0cca6403..ebb68f2b1 100644 --- a//cli/latest/reference/elasticache/describe-replication-groups.md +++ b//cli/latest/reference/elasticache/describe-replication-groups.md @@ -15 +15 @@ - * [AWS CLI 2.34.57 Command Reference](../../index.html) » + * [AWS CLI 2.34.61 Command Reference](../../index.html) » @@ -733 +733 @@ ReplicationGroups -> (list) ->>> A flag that enables encryption at-rest when set to `true` . +>>> A flag that enables encryption at-rest on the cluster when set to `true` . In some cases, encryption at-rest may be enabled even when this value is false. Use `StorageEncryptionType` to view the effective encryption state of a cluster. @@ -735 +735 @@ ReplicationGroups -> (list) ->>> You cannot modify the value of `AtRestEncryptionEnabled` after the cluster is created. To enable encryption at-rest on a cluster you must set `AtRestEncryptionEnabled` to `true` when you create a cluster. +>>> You cannot modify the value of `AtRestEncryptionEnabled` after the cluster is created. @@ -737,3 +737 @@ ReplicationGroups -> (list) ->>>> **Required:** Only available when creating a replication group in an Amazon VPC using Redis OSS version `3.2.6` , `4.x` or later. ->>> ->>> Default: `false` +>>> Default: `true` when using Valkey, `false` when using Redis OSS @@ -749,0 +748,12 @@ ReplicationGroups -> (list) +>> +>> StorageEncryptionType -> (string) +>> +>>> Indicates the type of encryption for data stored at rest in the replication group. The value is `none` if at-rest encryption is not enabled, `sse-elasticache` if an ElastiCache service-managed key is used, or `sse-kms` if a customer-managed KMS key is used. +>>> +>>> Possible values: +>>> +>>> * `none` +>>> * `sse-elasticache` +>>> * `sse-kms` +>>> + @@ -914,0 +925,25 @@ ReplicationGroups -> (list) +>> +>> Durability -> (string) +>> +>>> The durability setting of the replication group. For more information, see [Durability](http://docs.aws.amazon.com/AmazonElastiCache/latest/dg/Durability.html) . +>>> +>>> Possible values: +>>> +>>> * `default` +>>> * `async` +>>> * `sync` +>>> * `disabled` +>>> + +>> +>> EffectiveDurability -> (string) +>> +>>> The effective durability of the replication group. When `Durability` is set to `default` , the service resolves the actual durability based on the engine version, cluster mode, and other parameters. This field reflects the resolved value. For more information, see [Configuring Durability](http://docs.aws.amazon.com/AmazonElastiCache/latest/dg/ConfiguringDurability.html) . +>>> +>>> Possible values: +>>> +>>> * `async` +>>> * `sync` +>>> * `disabled` +>>> + @@ -926 +961 @@ ReplicationGroups -> (list) - * [AWS CLI 2.34.57 Command Reference](../../index.html) » + * [AWS CLI 2.34.61 Command Reference](../../index.html) »