AWS AmazonRDS documentation change
Summary
Clarified migration process for validate_password component during Aurora MySQL 8.4 upgrade
Security assessment
The changes improve clarity about migrating from validate_password plugin to component but don't address any specific vulnerability. The content describes existing security functionality without indicating a security fix.
Diff
diff --git a/AmazonRDS/latest/AuroraUserGuide/AuroraMySQL.Upgrade-v3-v84-security.md b/AmazonRDS/latest/AuroraUserGuide/AuroraMySQL.Upgrade-v3-v84-security.md index f0eb11068..d36d8ce4f 100644 --- a//AmazonRDS/latest/AuroraUserGuide/AuroraMySQL.Upgrade-v3-v84-security.md +++ b//AmazonRDS/latest/AuroraUserGuide/AuroraMySQL.Upgrade-v3-v84-security.md @@ -84 +84 @@ To prevent connection disruptions, verify the TLS configurations for your MySQL -Aurora MySQL version 8.4 introduces the `aurora_enable_validate_password_component` cluster parameter to enable or disable the `validate_password` component, removing the need to manually install or uninstall it. If you had previously installed the `validate_password` plugin and have since enabled the component after upgrading, only the component is effective – the plugin is ignored. +Aurora MySQL version 8.4 introduces the `aurora_enable_validate_password_component` cluster parameter to enable or disable the `validate_password` component. This removes the need to manually install or uninstall it. If you had previously installed the `validate_password` plugin and have since enabled the component after upgrading, only the component is effective – the plugin is ignored. @@ -86 +86 @@ Aurora MySQL version 8.4 introduces the `aurora_enable_validate_password_compone -Starting from Aurora MySQL version 8.4, if you had previously installed the `validate_password` plugin through the `INSTALL PLUGIN` command, you can migrate to the `validate_password` component by enabling the parameter `aurora_enable_validate_password_component` and then remove the plugin through the `UNINSTALL PLUGIN` command on your writer instance. +Starting from Aurora MySQL version 8.4, if you had previously installed the `validate_password` plugin through the `INSTALL PLUGIN` command, you can migrate to the `validate_password` component. Enable the parameter `aurora_enable_validate_password_component` and then remove the plugin through the `UNINSTALL PLUGIN` command on your writer instance. @@ -88 +88 @@ Starting from Aurora MySQL version 8.4, if you had previously installed the `val -If you previously installed the `validate_password` component manually using `INSTALL COMPONENT 'file://component_validate_password'`, ensure you set the `aurora_enable_validate_password_component` parameter in your target DB cluster parameter group when upgrading. After upgrading, the component will no longer be listed in the `mysql.component` table. You can use the `aurora_enable_validate_password_component` global variable to verify the status of the component. +If you previously installed the `validate_password` component manually using `INSTALL COMPONENT 'file://component_validate_password'`, set the `aurora_enable_validate_password_component` parameter in your target DB cluster parameter group when upgrading. After upgrading, the component will no longer be listed in the `mysql.component` table. You can use the `aurora_enable_validate_password_component` global variable to verify the status of the component.