AWS documentdb medium security documentation change
Summary
Added TLS 1.2+ requirement for DocumentDB 8.0 and new section 'What's new in Amazon DocumentDB 5.0.1' including TLS 1.2+ requirement, enhanced metrics, and security improvements.
Security assessment
Documents mandatory TLS 1.2+ requirements across versions and adds security-focused release notes. Specifically addresses transport layer security by deprecating older protocols. Provides concrete evidence through version-specific TLS enforcement details.
Diff
diff --git a/documentdb/latest/devguide/compatibility.md b/documentdb/latest/devguide/compatibility.md index d50becfd9..1d18f1761 100644 --- a//documentdb/latest/devguide/compatibility.md +++ b//documentdb/latest/devguide/compatibility.md @@ -83,0 +84,2 @@ With the release of Amazon DocumentDB 8.0, there are functional differences betw + * Amazon DocumentDB 8.0 only supports TLS 1.2 and higher for database connections. + @@ -96,0 +99,2 @@ Amazon DocumentDB 8.0 requires TLS 1.2 or higher. TLS 1.0 and TLS 1.1 are no lon + * What's new in Amazon DocumentDB 5.0.1 + @@ -126,0 +131,19 @@ Amazon DocumentDB does not support every MongoDB 5.0 feature. When we built Amaz +### What's new in Amazon DocumentDB 5.0.1 + +Amazon DocumentDB 5.0.1 is the first minor version release for the Amazon DocumentDB 5.0 major version. Minor versions include improvements such as new features, security fixes, and bug fixes. You can upgrade to 5.0.1 from 5.0.0 using a minor version upgrade. For more information, see [Amazon DocumentDB minor version upgrade](./docdb-minor-version-upgrade.html). + + * Enhanced aggregation capabilities with new operators (`$rand`, `$pow`, `$dateToParts`, `$dateFromParts`). + + * Active connections metric to monitor instances. The limits can be found at our [Amazon DocumentDB Quotas and limits](https://docs.aws.amazon.com/documentdb/latest/devguide/limits.html#limits.instance) page. + + * Granular command-level performance metrics in CloudWatch for CRUD operations (`find`, `insert`, `findAndModify`, `update`, `delete`, `aggregate`, `count`, `distinct`, `getMore`, `abortTransaction`, `commitTransaction`), exposing `AvgDuration`, `P100Duration`, and `MaxConcurrent` dimensions for improved operational monitoring. + + * Amazon DocumentDB 5.0.1 only supports TLS 1.2 and higher for database connections. + + * Added `gcRuntimeStats`, `documentFragmentStats`, and breakup of collection level metrics into `storageSegmentBase` and `storageSegmentExtended` in `collstats` to surface more information into the overall health of the garbage collection process. + + * Improved Global Cluster cross region resilience by eliminating secondary cluster reboot with Global Survivable Read Only. + + + +