AWS AmazonRDS documentation change
Summary
Added documentation for Oracle Database 26ai support, including new parameters, changes to the compatible parameter, and removed parameters.
Security assessment
The change introduces new security-related parameters like 'allow_weak_crypto' (controls deprecated cryptographic algorithms), 'tracefile_content_classification' (manages security labels in trace files), and 'unified_audit_trail_exclude_columns' (protects sensitive audit data). However, there's no evidence these address specific vulnerabilities; they appear as standard new features in Oracle 26ai.
Diff
diff --git a/AmazonRDS/latest/UserGuide/Oracle.Concepts.database-versions.md b/AmazonRDS/latest/UserGuide/Oracle.Concepts.database-versions.md index 3764c3ab7..4f874c418 100644 --- a//AmazonRDS/latest/UserGuide/Oracle.Concepts.database-versions.md +++ b//AmazonRDS/latest/UserGuide/Oracle.Concepts.database-versions.md @@ -7 +7 @@ -Oracle Database 21cOracle Database 19c +Oracle Database 26aiOracle Database 21cOracle Database 19c @@ -18,0 +19,2 @@ For information about upgrading your releases, see [Upgrading the RDS for Oracle + * Oracle Database 26ai with Amazon RDS + @@ -25,0 +28,99 @@ For information about upgrading your releases, see [Upgrading the RDS for Oracle +## Oracle Database 26ai with Amazon RDS + +Amazon RDS supports Oracle Database 26ai only in Enterprise Edition. Oracle released Oracle Database 26ai for Linux x86-64 as Enterprise Edition only; Standard Edition 2 (SE2) isn't available for Oracle Database 26ai on this platform. Oracle Database 26ai (26.0.0.0) includes many new features and updates from the previous version. As with Oracle Database 21c, Oracle Database 26ai supports only the multitenant architecture: you can't create a database as a traditional non-CDB. To learn more about the differences between CDBs and non-CDBs, see [Limitations of RDS for Oracle CDBs](./Oracle.Concepts.CDBs.html#Oracle.Concepts.single-tenant-limitations). + +In this section, you can find the features and changes important to using Oracle Database 26ai (26.0.0.0) on Amazon RDS. For a complete list of the changes, see the [Oracle Database 26ai](https://docs.oracle.com/en/database/oracle/oracle-database/26/index.html) documentation. For a complete list of features supported by each Oracle Database 26ai edition, see [ Permitted features, options, and management packs by Oracle database offering](https://docs.oracle.com/en/database/oracle/oracle-database/26/dblic/Licensing-Information.html) in the Oracle documentation. For more information about upgrading, see [Upgrading to Oracle Database 26ai](./USER_UpgradeDBInstance.Oracle.Major.html#USER_UpgradeDBInstance.Oracle.Major.26ai). + +### Amazon RDS parameter changes for Oracle Database 26ai (26.0.0.0) + +Oracle Database 26ai (26.0.0.0) includes several new parameters and parameters with new ranges and new default values. + +###### Topics + + * New parameters + + * Changes for the compatible parameter + + * Removed parameters + + + + +#### New parameters + +The following table shows the new Amazon RDS parameters for Oracle Database 26ai (26.0.0.0). + +Name | Range of values | Default value | Modifiable | Description +---|---|---|---|--- +[allow_legacy_reco_protocol](https://docs.oracle.com/en/database/oracle/oracle-database/26/refrn/ALLOW_LEGACY_RECO_PROTOCOL.html) | `TRUE | FALSE` | `TRUE` | N | Specifies whether the distributed transaction recovery process (RECO) uses the legacy recovery protocol or the upgraded protocol. +[allow_weak_crypto](https://docs.oracle.com/en/database/oracle/oracle-database/26/refrn/ALLOW_WEAK_CRYPTO.html) | `TRUE | FALSE` | `TRUE` | N | Controls whether deprecated or weak algorithms can be used with the DBMS_CRYPTO package. +[blockchain_table_retention_threshold](https://docs.oracle.com/en/database/oracle/oracle-database/26/refrn/BLOCKCHAIN_TABLE_RETENTION_THRESHOLD.html) | `0` to `365000` | `16` | Y | Specifies the maximum idle time (in days) that can be set when creating a blockchain or immutable table without the TABLE RETENTION privilege. +[calendar_fiscal_year_start](https://docs.oracle.com/en/database/oracle/oracle-database/26/refrn/CALENDAR_FISCAL_YEAR_START.html) | `NONE | ``DATE[, FORMAT]` | `NONE` | Y | Specifies the start of the fiscal year for use with SQL fiscal functions. +[client_prefetch_rows](https://docs.oracle.com/en/database/oracle/oracle-database/26/refrn/CLIENT_PREFETCH_ROWS.html) | `0` to `4294967295` | `0` | Y | Specifies the number of rows to be prefetched by the Oracle client driver to reduce network roundtrips. +[db_recovery_auto_rekey](https://docs.oracle.com/en/database/oracle/oracle-database/26/refrn/DB_RECOVERY_AUTO_REKEY.html) | `ON | OFF` | `ON` | Y | Enables or disables automatic tablespace rekey recovery on Data Guard standby instances. +[default_credential](https://docs.oracle.com/en/database/oracle/oracle-database/26/refrn/DEFAULT_CREDENTIAL.html) | `credential_name` | `NONE` | Y | Specifies the default credential for the session. +[error_message_details](https://docs.oracle.com/en/database/oracle/oracle-database/26/refrn/ERROR_MESSAGE_DETAILS.html) | `ON | OFF | DISALLOWED` | `ON` | Y | Controls whether the database raises additional stacked error messages with details about data values encountering an error. +[group_by_position_enabled](https://docs.oracle.com/en/database/oracle/oracle-database/26/refrn/GROUP_BY_POSITION_ENABLED.html) | `TRUE | FALSE` | `FALSE` | Y | Controls whether a positive integer in a GROUP BY clause is treated as the ordinal position of an expression in the select list. +[hybrid_read_only](https://docs.oracle.com/en/database/oracle/oracle-database/26/refrn/HYBRID_READ_ONLY.html) | `TRUE | FALSE` | `FALSE` | N | Enables or disables hybrid read-only mode for a PDB, allowing CDB common users to perform patching while local users see read-only mode. +[json_behavior](https://docs.oracle.com/en/database/oracle/oracle-database/26/refrn/JSON_BEHAVIOR.html) | `ON_ERROR:ERROR | ON_ERROR:NULL` | `NONE` | Y | Specifies default behaviors at the session level for SQL/JSON functions and conditions. +[json_expression_check](https://docs.oracle.com/en/database/oracle/oracle-database/26/refrn/JSON_EXPRESSION_CHECK.html) | `ON | OFF` | `OFF` | Y | Enables or disables JSON query statement checking. +[lockfree_reservation](https://docs.oracle.com/en/database/oracle/oracle-database/26/refrn/LOCKFREE_RESERVATION.html) | `ON | OFF` | `ON` | Y | Enables or disables lockfree reservation. +[max_columns](https://docs.oracle.com/en/database/oracle/oracle-database/26/refrn/MAX_COLUMNS.html) | `STANDARD | EXTENDED` | `STANDARD` | Y | Enables or disables Wide Tables, which increases the maximum column limit to 4096. +[max_saga_duration](https://docs.oracle.com/en/database/oracle/oracle-database/26/refrn/MAX_SAGA_DURATION.html) | `1` to `2147483647` | `86400` | Y | Specifies the maximum duration for a saga (in seconds). +[memoptimize_write_area_size](https://docs.oracle.com/en/database/oracle/oracle-database/26/refrn/MEMOPTIMIZE_WRITE_AREA_SIZE.html) | `0` to `2199023255552` | `0` | Y | Specifies the size of the ingest buffer in the large pool of the SGA. +[memoptimize_writes](https://docs.oracle.com/en/database/oracle/oracle-database/26/refrn/MEMOPTIMIZE_WRITES.html) | `HINT | ON` | `HINT` | Y | Controls whether fast ingest is used automatically for Memoptimized Rowstore tables or only when the MEMOPTIMIZE_WRITE hint is specified. +[memory_max_size](https://docs.oracle.com/en/database/oracle/oracle-database/26/refrn/MEMORY_MAX_SIZE.html) | `0` or `1610612736` to `2199023255552` | `0` | N | Specifies the maximum value to which MEMORY_SIZE can be set. +[memory_size](https://docs.oracle.com/en/database/oracle/oracle-database/26/refrn/MEMORY_SIZE.html) | `0` or `1610612736` to `2199023255552` | `0` | N | Specifies the size of instance-wide usable memory (combined SGA and PGA). +[mle_prog_languages](https://docs.oracle.com/en/database/oracle/oracle-database/26/refrn/MLE_PROG_LANGUAGES.html) | `ALL | JAVASCRIPT | OFF` | `ALL` | Y | Enables or disables the Multilingual Engine (MLE), or selectively enables certain languages. +[paranoid_concurrency_mode](https://docs.oracle.com/en/database/oracle/oracle-database/26/refrn/PARANOID_CONCURRENCY_MODE.html) | `TRUE | FALSE` | `FALSE` | N | Enables or disables strictly durable query data gets. +[pdb_lockdown_error](https://docs.oracle.com/en/database/oracle/oracle-database/26/refrn/PDB_LOCKDOWN_ERROR.html) | `RAISE | IGNORE` | `RAISE` | Y | Controls the mode to ignore or raise PDB lockdown errors. +[plsql_function_dynamic_stats](https://docs.oracle.com/en/database/oracle/oracle-database/26/refrn/PLSQL_FUNCTION_DYNAMIC_STATS.html) | `PREFERENCE | ON | OFF | CHOOSE` | `PREFERENCE` | Y | Specifies whether dynamic statistics are generated for PL/SQL functions at the session level. +[plsql_implicit_conversion_bool](https://docs.oracle.com/en/database/oracle/oracle-database/26/refrn/PLSQL_IMPLICIT_CONVERSION_BOOL.html) | `TRUE | FALSE` | `FALSE` | Y | Enables or disables implicit conversions in PL/SQL between numeric, character, and BOOLEAN data types. +[priority_txns_high_wait_target](https://docs.oracle.com/en/database/oracle/oracle-database/26/refrn/PRIORITY_TXNS_HIGH_WAIT_TARGET.html) | `1` to `2147483647` | `2147483647` | Y | Specifies the maximum seconds a HIGH priority transaction waits for a row lock before rolling back the blocker. +[priority_txns_medium_wait_target](https://docs.oracle.com/en/database/oracle/oracle-database/26/refrn/PRIORITY_TXNS_MEDIUM_WAIT_TARGET.html) | `1` to `2147483647` | `2147483647` | Y | Specifies the maximum seconds a MEDIUM priority transaction waits for a row lock before rolling back the blocker. +[priority_txns_mode](https://docs.oracle.com/en/database/oracle/oracle-database/26/refrn/PRIORITY_TXNS_MODE.html) | `ROLLBACK | TRACK` | `ROLLBACK` | Y | Specifies the mode for Priority Transactions (ROLLBACK to enable, TRACK to monitor without enforcement). +[read_only](https://docs.oracle.com/en/database/oracle/oracle-database/26/refrn/READ_ONLY.html) | `TRUE | FALSE` | `FALSE` | Y | Enables or disables read-only mode for a user session. +[result_cache_auto_blocklist](https://docs.oracle.com/en/database/oracle/oracle-database/26/refrn/RESULT_CACHE_AUTO_BLOCKLIST.html) | `ON | OFF` | `ON` | Y | Enables or disables adaptive result cache object exclusion. +[result_cache_integrity](https://docs.oracle.com/en/database/oracle/oracle-database/26/refrn/RESULT_CACHE_INTEGRITY.html) | `ENFORCED | TRUSTED` | `TRUSTED` | Y | Specifies whether the database enforces result cache integrity for deterministic constructs. +[run_addm_for_awr_report](https://docs.oracle.com/en/database/oracle/oracle-database/26/refrn/RUN_ADDM_FOR_AWR_REPORT.html) | `ALL | IMPORT_ONLY | NONE` | `NONE` | Y | Specifies the types of AWR snapshots for which ADDM can be run inside an AWR report. +[session_exit_on_package_state_error](https://docs.oracle.com/en/database/oracle/oracle-database/26/refrn/SESSION_EXIT_ON_PACKAGE_STATE_ERROR.html) | `TRUE | FALSE` | `FALSE` | Y | Forces a hard session exit when a session's PL/SQL package state has been invalidated if enabled. +[soda_behavior](https://docs.oracle.com/en/database/oracle/oracle-database/26/refrn/SODA_BEHAVIOR.html) | `behavior_string` | `NONE` | Y | Controls the behavior for SODA (Simple Oracle Document Access) operations. +[sql_error_mitigation](https://docs.oracle.com/en/database/oracle/oracle-database/26/refrn/SQL_ERROR_MITIGATION.html) | `ON | OFF` | `ON` | Y | Enables or disables automatic error mitigation for SQL statements. +[sql_history_enabled](https://docs.oracle.com/en/database/oracle/oracle-database/26/refrn/SQL_HISTORY_ENABLED.html) | `TRUE | FALSE` | `FALSE` | Y | Enables or disables SQL history monitoring for user-issued statements in each session. +[sql_transpiler](https://docs.oracle.com/en/database/oracle/oracle-database/26/refrn/SQL_TRANSPILER.html) | `ON | OFF` | `OFF` | Y | Enables or disables the SQL Transpiler, which automatically converts PL/SQL functions into SQL expressions. +[standby_parse_limit_seconds](https://docs.oracle.com/en/database/oracle/oracle-database/26/refrn/STANDBY_PARSE_LIMIT_SECONDS.html) | `0` to `2147483647` | `300` | Y | Specifies the standby parse time limit (in seconds). +[statement_redirect_service](https://docs.oracle.com/en/database/oracle/oracle-database/26/refrn/STATEMENT_REDIRECT_SERVICE.html) | `NONE | `service_name`` | `NONE` | Y | Specifies the statement redirect service. +[tablespace_encryption_default_cipher_mode](https://docs.oracle.com/en/database/oracle/oracle-database/26/refrn/TABLESPACE_ENCRYPTION_DEFAULT_CIPHER_MODE.html) | `CFB | XTS` | `XTS` | Y | Specifies the default tablespace encryption block cipher mode. +[time_at_dbtimezone](https://docs.oracle.com/en/database/oracle/oracle-database/26/refrn/TIME_AT_DBTIMEZONE.html) | `OFF | USER_SQL | DATABASE` | `OFF` | Y | Uses the DB timezone when computing the current time. +[tracefile_content_classification](https://docs.oracle.com/en/database/oracle/oracle-database/26/refrn/TRACEFILE_CONTENT_CLASSIFICATION.html) | `ENABLE | DISABLE | DEFAULT` | `DEFAULT` | Y | Enables or disables output of trace record security label prefix. +[transaction_recovery](https://docs.oracle.com/en/database/oracle/oracle-database/26/refrn/TRANSACTION_RECOVERY.html) | `ENABLED | DISABLED` | `ENABLED` | Y | Specifies whether transaction recovery is enabled or disabled for a PDB. +[txn_priority](https://docs.oracle.com/en/database/oracle/oracle-database/26/refrn/TXN_PRIORITY.html) | `HIGH | MEDIUM | LOW` | `HIGH` | Y | Specifies the priority for all user transactions in a session. +[unified_audit_trail_exclude_columns](https://docs.oracle.com/en/database/oracle/oracle-database/26/refrn/UNIFIED_AUDIT_TRAIL_EXCLUDE_COLUMNS.html) | `NONE | `column[, column ] ...`` | `NONE` | N | Controls whether columns containing sensitive data are populated in the UNIFIED_AUDIT_TRAIL view. +[vector_index_neighbor_graph_reload](https://docs.oracle.com/en/database/oracle/oracle-database/26/refrn/VECTOR_INDEX_NEIGHBOR_GRAPH_RELOAD.html) | `RESTART | OFF` | `RESTART` | Y | Specifies whether HNSW reload is enabled. +[vector_memory_size](https://docs.oracle.com/en/database/oracle/oracle-database/26/refrn/VECTOR_MEMORY_SIZE.html) | `0` to `2199023255552` | `0` | Y | Specifies the size of the Vector Pool in the SGA. +[vector_query_capture](https://docs.oracle.com/en/database/oracle/oracle-database/26/refrn/VECTOR_QUERY_CAPTURE.html) | `ON | OFF` | `ON` | Y | Enables or disables capture of query vectors. +[xml_client_side_decoding](https://docs.oracle.com/en/database/oracle/oracle-database/26/refrn/XML_CLIENT_SIDE_DECODING.html) | `TRUE | FALSE` | `TRUE` | Y | Enables or disables XML client-side decoding. +[xml_handling_of_invalid_chars](https://docs.oracle.com/en/database/oracle/oracle-database/26/refrn/XML_HANDLING_OF_INVALID_CHARS.html) | `RAISE_ERROR | CONVERT_TO_QUESTION_MARK | CONVERT_TO_REFERENCE_CHAR | CONVERT_TO_NULL` | `RAISE_ERROR` | Y | Handles invalid characters during xmlelement. +[xml_params](https://docs.oracle.com/en/database/oracle/oracle-database/26/refrn/XML_PARAMS.html) | `NONE | `parameter=value[, parameter=value ] ...`` | `NONE` | Y | Specifies parameters to alter XML behavior. + +#### Changes for the compatible parameter + +The `compatible` parameter has a new maximum value for Oracle Database 26ai (26.0.0.0) on Amazon RDS. The following table shows the new default value. + +Parameter name | Oracle Database 26ai (26.0.0.0) maximum value +---|--- +[ compatible](https://docs.oracle.com/en/database/oracle/oracle-database/26/refrn/COMPATIBLE.html) | 23.6.0 + +#### Removed parameters + +The following parameters were removed in Oracle Database 26ai (26.0.0.0): + + * `allow_deprecated_rpcs` + + * `audit_sys_operations` + + * `log_archive_start` + + + +