AWS AmazonRDS documentation change
Summary
Updated regional availability for Kerberos authentication and added new engine-specific service principal format for regions launched after Israel (Tel Aviv)
Security assessment
The changes document expanded regional availability of Kerberos authentication (a security feature) and introduce a new engine-specific service principal format for newer regions. This improves authentication configuration guidance but doesn't address any specific vulnerability or security incident.
Diff
diff --git a/AmazonRDS/latest/UserGuide/Concepts.RDS_Fea_Regions_DB-eng.Feature.KerberosAuthentication.md b/AmazonRDS/latest/UserGuide/Concepts.RDS_Fea_Regions_DB-eng.Feature.KerberosAuthentication.md index bf9e26ef5..b3230e28e 100644 --- a//AmazonRDS/latest/UserGuide/Concepts.RDS_Fea_Regions_DB-eng.Feature.KerberosAuthentication.md +++ b//AmazonRDS/latest/UserGuide/Concepts.RDS_Fea_Regions_DB-eng.Feature.KerberosAuthentication.md @@ -20 +20 @@ Kerberos authentication isn't available with the following engines: -Although most AWS Regions are active by default for your AWS account, certain Regions are activated only when you manually select them. These Regions are referred to as _opt-in Regions_. In contrast, Regions that are active by default, as soon as your AWS account is created, are referred to as _commercial Regions_ , or simply, _Regions_. For opt-in Regions, you must use a regionalized service principal of the form `directoryservice.rds.`region_name`.amazonaws.com`. For example, for Africa (Cape Town), you must add service principal `directoryservice.rds.af-south-1.amazonaws.com` to your trust policy. For more information, see [Kerberos authentication](./database-authentication.html#kerberos-authentication). +Although most AWS Regions are active by default for your AWS account, certain Regions are activated only when you manually select them. These Regions are referred to as _opt-in Regions_. In contrast, Regions that are active by default, as soon as your AWS account is created, are referred to as _commercial Regions_ , or simply, _Regions_. For opt-in Regions, you must use a regionalized service principal of the form `directoryservice.rds.`region_name`.amazonaws.com`. For example, for Africa (Cape Town), you must add service principal `directoryservice.rds.af-south-1.amazonaws.com` to your trust policy. For AWS Regions launched after Israel (Tel Aviv), starting with Canada West (Calgary), you must use the engine-specific service principal `directoryservice-`engine`.rds.`region_name`.amazonaws.com`. For example, for RDS PostgreSQL in Canada West (Calgary), you must add service principal `directoryservice-postgresql.rds.ca-west-1.amazonaws.com` to your trust policy. For more information, see [Kerberos authentication](./database-authentication.html#kerberos-authentication). @@ -96 +96 @@ Asia Pacific (Jakarta) | All versions | All versions | All versions -Asia Pacific (Malaysia) | Not available | Not available | Not available +Asia Pacific (Malaysia) | All versions | All versions | All versions @@ -99 +99 @@ Asia Pacific (Mumbai) | All versions | All versions | All versions -Asia Pacific (New Zealand) | Not available | Not available | Not available +Asia Pacific (New Zealand) | All versions | All versions | All versions @@ -104,2 +104,2 @@ Asia Pacific (Sydney) | All versions | All versions | All versions -Asia Pacific (Taipei) | Not available | Not available | Not available -Asia Pacific (Thailand) | Not available | Not available | Not available +Asia Pacific (Taipei) | All versions | All versions | All versions +Asia Pacific (Thailand) | All versions | All versions | All versions @@ -108 +108 @@ Canada (Central) | All versions | All versions | All versions -Canada West (Calgary) | Not available | Not available | Not available +Canada West (Calgary) | All versions | All versions | All versions @@ -120 +120 @@ Israel (Tel Aviv) | All versions | All versions | All versions -Mexico (Central) | Not available | Not available | Not available +Mexico (Central) | All versions | All versions | All versions @@ -186 +186 @@ Asia Pacific (Jakarta) | All versions | All versions | All versions | All versio -Asia Pacific (Malaysia) | Not available | Not available | Not available | Not available | Not available | Not available | Not available | Not available | Not available +Asia Pacific (Malaysia) | All versions | All versions | All versions | All versions | All versions | All versions | All versions | All versions | All versions @@ -189,2 +189,2 @@ Asia Pacific (Mumbai) | All versions | All versions | All versions | All version -Asia Pacific (New Zealand) | Not available | Not available | Not available | Not available | Not available | Not available | Not available | Not available | Not available -Asia Pacific (Osaka) | Not available | Not available | Not available | Not available | Not available | Not available | Not available | Not available | Not available +Asia Pacific (New Zealand) | All versions | All versions | All versions | All versions | All versions | All versions | All versions | All versions | All versions +Asia Pacific (Osaka) | All versions | All versions | All versions | All versions | All versions | All versions | All versions | All versions | All versions @@ -194,2 +194,2 @@ Asia Pacific (Sydney) | All versions | All versions | All versions | All version -Asia Pacific (Taipei) | Not available | Not available | Not available | Not available | Not available | Not available | Not available | Not available | Not available -Asia Pacific (Thailand) | Not available | Not available | Not available | Not available | Not available | Not available | Not available | Not available | Not available +Asia Pacific (Taipei) | All versions | All versions | All versions | All versions | All versions | All versions | All versions | All versions | All versions +Asia Pacific (Thailand) | All versions | All versions | All versions | All versions | All versions | All versions | All versions | All versions | All versions @@ -198 +198 @@ Canada (Central) | All versions | All versions | All versions | All versions | A -Canada West (Calgary) | Not available | Not available | Not available | Not available | Not available | Not available | Not available | Not available | Not available +Canada West (Calgary) | All versions | All versions | All versions | All versions | All versions | All versions | All versions | All versions | All versions @@ -210 +210 @@ Israel (Tel Aviv) | All versions | All versions | All versions | All versions | -Mexico (Central) | Not available | Not available | Not available | Not available | Not available | Not available | Not available | Not available | Not available +Mexico (Central) | All versions | All versions | All versions | All versions | All versions | All versions | All versions | All versions | All versions