AWS AmazonElastiCache documentation change
Summary
Added documentation about using Secrets Manager for automatic password rotation with RBAC authentication
Security assessment
The change adds information about automatic password rotation capabilities through Secrets Manager, which enhances security by enabling credential rotation. However, there's no evidence of a specific security vulnerability being fixed.
Diff
diff --git a/AmazonElastiCache/latest/dg/auth.md b/AmazonElastiCache/latest/dg/auth.md index 07438a857..9642e1ed9 100644 --- a//AmazonElastiCache/latest/dg/auth.md +++ b//AmazonElastiCache/latest/dg/auth.md @@ -13 +13 @@ Overview of AUTHApplying authenticationModifying AUTH on an existing serverMigra -The **AUTH** has been superseded by [Role-Based Access Control (RBAC)](./Clusters.RBAC.html). All serverless caches must use RBAC for authentication. +The **AUTH** has been superseded by [Role-Based Access Control (RBAC)](./Clusters.RBAC.html). All serverless caches must use RBAC for authentication. With RBAC, you can also use Secrets Manager for automatic password rotation. For more information, see [Automatically rotating passwords for users](./User-Secrets-Manager.html).