AWS documentdb medium security documentation change
Summary
Updated TLS parameter documentation to recommend TLS 1.2+ for DocumentDB 5.0 and clarify that only TLS 1.2+ is supported starting with 5.0.1 and 8.0+ versions.
Security assessment
Explicitly recommends higher TLS versions and documents version-specific TLS requirements. Addresses potential security weaknesses from older TLS versions by guiding users toward secure configurations. Provides concrete evidence through specific TLS version requirements.
Diff
diff --git a/documentdb/latest/devguide/cluster_parameter_groups-list_of_parameters.md b/documentdb/latest/devguide/cluster_parameter_groups-list_of_parameters.md index 1b4196223..715d5f6d0 100644 --- a//documentdb/latest/devguide/cluster_parameter_groups-list_of_parameters.md +++ b//documentdb/latest/devguide/cluster_parameter_groups-list_of_parameters.md @@ -54 +54 @@ Amazon DocumentDB cluster-level parameters Parameter | Default Value | Valid Val - * `enabled` — TLS connections are required to connect. For Amazon DocumentDB 5.0 and earlier, this enables TLS 1.0 through 1.3. For Amazon DocumentDB 8.0 and later, the minimum supported version is TLS 1.2. + * `enabled` — TLS connections are required to connect. For Amazon DocumentDB 5.0 and earlier, this enables TLS 1.0 through 1.3, but we recommend TLS 1.2 or higher. Only TLS 1.2 and higher is supported on Amazon DocumentDB 5.0 starting with minor version 5.0.1, Amazon DocumentDB 8.0 and newer.