AWS redshift medium security documentation change
Summary
Updated AWS SDK for Java dependency from version 1.11.118+ to 2.40.5+ for IAM database authentication.
Security assessment
The dependency update addresses potential security vulnerabilities by requiring a newer SDK version. Older SDK versions may contain security flaws, and this change ensures users employ updated libraries for IAM authentication, a critical security feature.
Diff
diff --git a/redshift/latest/mgmt/jdbc20-download-driver.md b/redshift/latest/mgmt/jdbc20-download-driver.md index c7f1973aa..78fe93e90 100644 --- a//redshift/latest/mgmt/jdbc20-download-driver.md +++ b//redshift/latest/mgmt/jdbc20-download-driver.md @@ -23 +23 @@ For each computer where you use the Amazon Redshift JDBC driver version 2.x, mak -If you use the Amazon Redshift JDBC driver for database authentication, make sure that you have AWS SDK for Java 1.11.118 or later in your Java class path. If you don't have AWS SDK for Java installed, download the ZIP file with JDBC 4.2–compatible driver and driver dependent libraries for the AWS SDK: +If you use the Amazon Redshift JDBC driver for database authentication, make sure that you have AWS SDK for Java 2.40.5 or later in your Java class path. If you don't have AWS SDK for Java installed, download the ZIP file with JDBC 4.2–compatible driver and driver dependent libraries for the AWS SDK: @@ -27 +27 @@ If you use the Amazon Redshift JDBC driver for database authentication, make sur -This ZIP file contains the JDBC 4.2–compatible driver version 2.x and AWS SDK for Java 1.x driver–dependent library files. Unzip the dependent jar files to the same location as the JDBC driver. Only the JDBC driver needs to be in CLASSPATH. +This ZIP file contains the JDBC 4.2–compatible driver version 2.x and AWS SDK for Java 2.x driver–dependent library files. Unzip the dependent jar files to the same location as the JDBC driver. Only the JDBC driver needs to be in CLASSPATH. @@ -29 +29 @@ This ZIP file contains the JDBC 4.2–compatible driver version 2.x and AWS SDK -This ZIP file doesn't include the complete AWS SDK for Java 1.x. However, it includes the AWS SDK for Java 1.x driver–dependent libraries that are required for AWS Identity and Access Management (IAM) database authentication. +This ZIP file doesn't include the complete AWS SDK for Java 2.x. However, it includes the AWS SDK for Java 2.x driver–dependent libraries that are required for AWS Identity and Access Management (IAM) database authentication. @@ -33 +33 @@ Use this Amazon Redshift JDBC driver with the AWS SDK that is required for IAM d -To install the complete AWS SDK for Java 1.x, see [AWS SDK for Java 1.x](https://docs.aws.amazon.com/sdk-for-java/v1/developer-guide/welcome.html) in the _AWS SDK for Java Developer Guide_. +To install the complete AWS SDK for Java 2.x, see [AWS SDK for Java 2.x](https://docs.aws.amazon.com/sdk-for-java/v2/developer-guide/home.html) in the _AWS SDK for Java Developer Guide_.