AWS documentdb: DocumentDB security patches for request processing and authentication hardening
Summary
Added release notes for August 18, 2026 security patches across DocumentDB versions 8.0, 5.0, 4.0, and 3.6, improving request validation and authentication robustness.
Security assessment
The evidence line explicitly describes hardening of the authentication handshake to handle unexpected/malformed input, addressing potential authentication vulnerabilities.
Evidence
+ * **Authentication handshake hardening** Amazon DocumentDB now validates the authentication exchange more thoroughly. This improves robustness when handling unexpected or malformed input.
Diff
diff --git a/documentdb/latest/devguide/release-notes.md b/documentdb/latest/devguide/release-notes.md index 838835184..d2cb877db 100644 --- a//documentdb/latest/devguide/release-notes.md +++ b//documentdb/latest/devguide/release-notes.md @@ -42,3 +42,11 @@ Release notes for Amazon DocumentDB engine version 8.0 (MongoDB 8.0 compatibilit -Date | Minor version | Release notes ----|---|--- -August 11, 2026 | 8.0.1 | **New features** **Amazon DocumentDB 8.0.1 (Engine Version: 4.0.8864)** +###### Amazon DocumentDB 8.0.1 + +Date | Release notes +---|--- +August 18, 2026 | **Security and stability improvements** **Amazon DocumentDB 8.0.1 (Engine Version: 4.0.9938) [in progress]** This optional engine patch provides the following improvements: + + * **Improved request processing** Amazon DocumentDB now validates incoming client requests more thoroughly along the connection and message-parsing path. This improves resilience and stability across a wider range of input patterns. + * **Authentication handshake hardening** Amazon DocumentDB now validates the authentication exchange more thoroughly. This improves robustness when handling unexpected or malformed input. + +Amazon DocumentDB automatically applies this patch during your next maintenance window. +August 11, 2026 | **New features** **Amazon DocumentDB 8.0.1 (Engine Version: 4.0.8864)** @@ -51,2 +59,2 @@ August 11, 2026 | 8.0.1 | **New features** **Amazon DocumentDB 8.0.1 (Engine Ve -July 22, 2026 | 8.0.0, 8.0.1 | **New feature** Amazon DocumentDB clusters running Engine Version 8.0 and later now support a maximum storage limit of 256 TiB, doubling the previous limit of 128 TiB. For more information, see [Amazon DocumentDB quotas](./limits.html). -July 13, 2026 | 8.0.1 | **Amazon DocumentDB 8.0.1 (Engine Version: 4.0.8864)** **New features and improvements** +July 22, 2026 | **New feature** Amazon DocumentDB clusters running Engine Version 8.0 and later now support a maximum storage limit of 256 TiB, doubling the previous limit of 128 TiB. For more information, see [Amazon DocumentDB quotas](./limits.html). +July 13, 2026 | **Amazon DocumentDB 8.0.1 (Engine Version: 4.0.8864)** **New features and improvements** @@ -69,2 +77,14 @@ July 13, 2026 | 8.0.1 | **Amazon DocumentDB 8.0.1 (Engine Version: 4.0.8864)** -May 13, 2026 | 8.0.0 | **New feature** Amazon DocumentDB serverless is now available for Amazon DocumentDB 8.0. For more information, see [Using Amazon DocumentDB serverless](./docdb-serverless.html). -May 6, 2026 | 8.0.0 | **Bug fixes and other changes** **Amazon DocumentDB 8.0 (Engine Version: 4.0.6940)** This update provides an optional engine patch with the following improvements: + +###### Amazon DocumentDB 8.0.0 + +Date | Release notes +---|--- +August 18, 2026 | **Security and stability improvements** **Amazon DocumentDB 8.0.0 (Engine Version: 4.0.9912) [in progress]** This optional engine patch provides the following improvements: + + * **Improved request processing** Amazon DocumentDB now validates incoming client requests more thoroughly along the connection and message-parsing path. This improves resilience and stability across a wider range of input patterns. + * **Authentication handshake hardening** Amazon DocumentDB now validates the authentication exchange more thoroughly. This improves robustness when handling unexpected or malformed input. + +If you don't apply it sooner, Amazon DocumentDB automatically applies this patch during your next maintenance window 30 days after release. +July 22, 2026 | **New feature** Amazon DocumentDB clusters running Engine Version 8.0 and later now support a maximum storage limit of 256 TiB, doubling the previous limit of 128 TiB. For more information, see [Amazon DocumentDB quotas](./limits.html). +May 13, 2026 | **New feature** Amazon DocumentDB serverless is now available for Amazon DocumentDB 8.0. For more information, see [Using Amazon DocumentDB serverless](./docdb-serverless.html). +May 6, 2026 | **Bug fixes and other changes** **Amazon DocumentDB 8.0 (Engine Version: 4.0.6940)** This update provides an optional engine patch with the following improvements: @@ -75,2 +95,2 @@ May 6, 2026 | 8.0.0 | **Bug fixes and other changes** **Amazon DocumentDB 8.0 ( -April 20, 2026 | 8.0.0 | **New feature** In-place major version upgrade (MVU) from Amazon DocumentDB 5.0 to Amazon DocumentDB 8.0 is now available. For more information, see [Amazon DocumentDB in-place major version upgrade](./docdb-mvu.html). -April 20, 2026 | 8.0.0 | **New features and improvements** **Amazon DocumentDB 8.0 (Engine Versions: 4.0.5995, 4.0.6473)** This is a required engine patch that includes the following new features, improvements, and fixes: +April 20, 2026 | **New feature** In-place major version upgrade (MVU) from Amazon DocumentDB 5.0 to Amazon DocumentDB 8.0 is now available. For more information, see [Amazon DocumentDB in-place major version upgrade](./docdb-mvu.html). +April 20, 2026 | **New features and improvements** **Amazon DocumentDB 8.0 (Engine Versions: 4.0.5995, 4.0.6473)** This is a required engine patch that includes the following new features, improvements, and fixes: @@ -94,2 +114,2 @@ All Amazon DocumentDB 8.0 clusters will be automatically upgraded to this patch -March 26, 2026 | 8.0.0 | **New features** Amazon DocumentDB now supports the latest generation of memory-optimized instances, db.r8g, powered by Arm-based AWS Graviton4 processors, providing up to 30% better performance over R6G instances. For more information, see [Managing instance classes](./db-instance-classes.html) in this guide -November 11, 2025 | 8.0.0 | **New features** Amazon DocumentDB now offers full wire protocol compatibility with MongoDB 8.0. Amazon DocumentDB 8.0 improves query performance enabling you to build high-performance applications at a lower cost. **Amazon DocumentDB 8.0 (Engine Patch Version 4.0.4448)** +March 26, 2026 | **New features** Amazon DocumentDB now supports the latest generation of memory-optimized instances, db.r8g, powered by Arm-based AWS Graviton4 processors, providing up to 30% better performance over R6G instances. For more information, see [Managing instance classes](./db-instance-classes.html) in this guide +November 11, 2025 | **New features** Amazon DocumentDB now offers full wire protocol compatibility with MongoDB 8.0. Amazon DocumentDB 8.0 improves query performance enabling you to build high-performance applications at a lower cost. **Amazon DocumentDB 8.0 (Engine Patch Version 4.0.4448)** @@ -113,4 +133,12 @@ Release notes for Amazon DocumentDB engine version 5.0 (MongoDB 5.0 compatibilit -Date | Minor version | Release notes ----|---|--- -August 11, 2026 | 5.0.1 | **New feature** **Amazon DocumentDB 5.0.1 (Engine Version: 3.0.21138)** Enabled support for SCRAM-SHA-256 authentication. -June 8, 2026 | 5.0.1 | **New minor version** **Amazon DocumentDB 5.0.1 (Engine Version 3.0.21138)** Amazon DocumentDB 5.0.1 is the first minor version release for the Amazon DocumentDB 5.0 major version. Minor versions include improvements such as new features, security fixes, and bug fixes. You can upgrade to 5.0.1 from 5.0.0 using a minor version upgrade. For more information, see [Amazon DocumentDB minor version upgrade](./docdb-minor-version-upgrade.html). This minor version includes the following new features and improvements: +###### Amazon DocumentDB 5.0.1 + +Date | Release notes +---|--- +August 18, 2026 | **Security and stability improvements** **Amazon DocumentDB 5.0.1 (Engine Version: 3.0.22319) [in progress]** This optional engine patch provides the following improvements: + + * **Improved request processing** Amazon DocumentDB now validates incoming client requests more thoroughly along the connection and message-parsing path. This improves resilience and stability across a wider range of input patterns. + * **Authentication handshake hardening** Amazon DocumentDB now validates the authentication exchange more thoroughly. This improves robustness when handling unexpected or malformed input. + +If you don't apply it sooner, Amazon DocumentDB automatically applies this patch during your next maintenance window 30 days after release. +August 11, 2026 | **New feature** **Amazon DocumentDB 5.0.1 (Engine Version: 3.0.21138)** Enabled support for SCRAM-SHA-256 authentication. +June 8, 2026 | **New minor version** **Amazon DocumentDB 5.0.1 (Engine Version 3.0.21138)** Amazon DocumentDB 5.0.1 is the first minor version release for the Amazon DocumentDB 5.0 major version. Minor versions include improvements such as new features, security fixes, and bug fixes. You can upgrade to 5.0.1 from 5.0.0 using a minor version upgrade. For more information, see [Amazon DocumentDB minor version upgrade](./docdb-minor-version-upgrade.html). This minor version includes the following new features and improvements: @@ -130,3 +158,15 @@ June 8, 2026 | 5.0.1 | **New minor version** **Amazon DocumentDB 5.0.1 (Engine -May 6, 2026 | 5.0.0 | **Bug fixes and other changes** **Amazon DocumentDB 5.0 (Engine Version: 3.0.20421)** This release is for a required security patch. -April 20, 2026 | 5.0.0 | **New feature** In-place major version upgrade (MVU) from Amazon DocumentDB 5.0 to Amazon DocumentDB 8.0 is now available. For more information, see [Amazon DocumentDB in-place major version upgrade](./docdb-mvu.html). -April 13, 2026 | 5.0.0 | **Bug fixes and other changes** **Amazon DocumentDB 5.0 (Engine Versions: 3.0.19917)** This is a required engine patch that includes the following new features, improvements, and fixes: + +###### Amazon DocumentDB 5.0.0 + +Date | Release notes +---|--- +August 18, 2026 | **Security and stability improvements** **Amazon DocumentDB 5.0.0 (Engine Version: 3.0.22303) [in progress]** This optional engine patch provides the following improvements: + + * **Improved request processing** Amazon DocumentDB now validates incoming client requests more thoroughly along the connection and message-parsing path. This improves resilience and stability across a wider range of input patterns. + * **Authentication handshake hardening** Amazon DocumentDB now validates the authentication exchange more thoroughly. This improves robustness when handling unexpected or malformed input. + * **Access-control enforcement** Amazon DocumentDB now verifies required privileges consistently at all nesting levels for nested query operations. + +If you don't apply it sooner, Amazon DocumentDB automatically applies this patch during your next maintenance window 30 days after release. +May 6, 2026 | **Bug fixes and other changes** **Amazon DocumentDB 5.0 (Engine Version: 3.0.20421)** This release is for a required security patch. +April 20, 2026 | **New feature** In-place major version upgrade (MVU) from Amazon DocumentDB 5.0 to Amazon DocumentDB 8.0 is now available. For more information, see [Amazon DocumentDB in-place major version upgrade](./docdb-mvu.html). +April 13, 2026 | **Bug fixes and other changes** **Amazon DocumentDB 5.0 (Engine Versions: 3.0.19917)** This is a required engine patch that includes the following new features, improvements, and fixes: @@ -138 +178 @@ All Amazon DocumentDB 5.0 clusters will be automatically upgraded to this patch -October 22, 2025 | 5.0.0 | **New features** **Amazon DocumentDB 5.0 (Engine Patch Version 3.0.17983)** Amazon DocumentDB now supports the latest generation of memory-optimized instances, db.r8g, powered by Arm-based AWS Graviton4 processors, providing up to 30% better performance over R6G instances. For more information, see [Managing instance classes](./db-instance-classes.html) in this guide and this [blog post](https://aws.amazon.com/about-aws/whats-new/2025/10/amazon-documentdb-graviton4-based-r8g-database-instances/). **New features** **Amazon DocumentDB 5.0 (Engine Patch Version 3.0.15902)** +October 22, 2025 | **New features** **Amazon DocumentDB 5.0 (Engine Patch Version 3.0.17983)** Amazon DocumentDB now supports the latest generation of memory-optimized instances, db.r8g, powered by Arm-based AWS Graviton4 processors, providing up to 30% better performance over R6G instances. For more information, see [Managing instance classes](./db-instance-classes.html) in this guide and this [blog post](https://aws.amazon.com/about-aws/whats-new/2025/10/amazon-documentdb-graviton4-based-r8g-database-instances/). **New features** **Amazon DocumentDB 5.0 (Engine Patch Version 3.0.15902)** @@ -145,3 +185,3 @@ October 22, 2025 | 5.0.0 | **New features** **Amazon DocumentDB 5.0 (Engine Pat -October 16, 2025 | 5.0.0 | **New feature** **Amazon DocumentDB 5.0 (Engine Patch Version 3.0.15902)** Amazon DocumentDB now supports dual-stack mode (IPv4/IPv6) when your cluster is in a virtual private cloud (VPC). For more information, see this [blog post](https://aws.amazon.com/about-aws/whats-new/2025/10/amazon-documentdb-ipv6-support) and [Amazon VPC and Amazon DocumentDB](./vpc-docdb.html) in the _Amazon DocumentDB Developer Guide_. -September 15, 2025 | 5.0.0 | **Bug fixes and other changes** **Amazon DocumentDB 5.0 (Engine Patch Version 3.0.17983)** Fixed engine crash when queries contain subsequent `$replaceRoot` and `$lookup` stage. -July 29, 2025 | 5.0.0 | **New features** **Amazon DocumentDB 5.0 (Engine Patch Version 3.0.15902)** +October 16, 2025 | **New feature** **Amazon DocumentDB 5.0 (Engine Patch Version 3.0.15902)** Amazon DocumentDB now supports dual-stack mode (IPv4/IPv6) when your cluster is in a virtual private cloud (VPC). For more information, see this [blog post](https://aws.amazon.com/about-aws/whats-new/2025/10/amazon-documentdb-ipv6-support) and [Amazon VPC and Amazon DocumentDB](./vpc-docdb.html) in the _Amazon DocumentDB Developer Guide_. +September 15, 2025 | **Bug fixes and other changes** **Amazon DocumentDB 5.0 (Engine Patch Version 3.0.17983)** Fixed engine crash when queries contain subsequent `$replaceRoot` and `$lookup` stage. +July 29, 2025 | **New features** **Amazon DocumentDB 5.0 (Engine Patch Version 3.0.15902)** @@ -159,3 +199,3 @@ July 29, 2025 | 5.0.0 | **New features** **Amazon DocumentDB 5.0 (Engine Patch -July 28, 2025 | 5.0.0 | **New features** **Amazon DocumentDB 5.0 (Engine Patch Version 3.0.14228)** Amazon DocumentDB instance-based clusters now support Amazon DocumentDB Serverless, an on-demand, auto-scaling configuration. For more information, see [Using Amazon DocumentDB serverless](./docdb-serverless.html) and this [what's new blog post](https://aws.amazon.com/about-aws/whats-new/2025/07/amazon-documentdb-serverless/). -March 24, 2025 | 5.0.0 | **New feature** **Amazon DocumentDB 5.0 (Engine Patch Version 3.0.11800)** Added support for `postBatchResumeToken` in change streams. For more information, see [Resuming a change stream with postBatchResumeToken](./change_streams.html#change_streams-postBatchResumeToken). -January 15, 2025 | 5.0.0 | **New features** **Amazon DocumentDB 5.0 (Engine Patch Version 3.0.11800)** Amazon DocumentDB now maintains read availability through writer instance restarts. Reader instances will now continue to serve read requests during writer instance restarts. **Bug fixes and other changes** **Amazon DocumentDB 5.0 (Engine Patch Version 3.0.11800)** +July 28, 2025 | **New features** **Amazon DocumentDB 5.0 (Engine Patch Version 3.0.14228)** Amazon DocumentDB instance-based clusters now support Amazon DocumentDB Serverless, an on-demand, auto-scaling configuration. For more information, see [Using Amazon DocumentDB serverless](./docdb-serverless.html) and this [what's new blog post](https://aws.amazon.com/about-aws/whats-new/2025/07/amazon-documentdb-serverless/). +March 24, 2025 | **New feature** **Amazon DocumentDB 5.0 (Engine Patch Version 3.0.11800)** Added support for `postBatchResumeToken` in change streams. For more information, see [Resuming a change stream with postBatchResumeToken](./change_streams.html#change_streams-postBatchResumeToken). +January 15, 2025 | **New features** **Amazon DocumentDB 5.0 (Engine Patch Version 3.0.11800)** Amazon DocumentDB now maintains read availability through writer instance restarts. Reader instances will now continue to serve read requests during writer instance restarts. **Bug fixes and other changes** **Amazon DocumentDB 5.0 (Engine Patch Version 3.0.11800)** @@ -168,2 +208,2 @@ January 15, 2025 | 5.0.0 | **New features** **Amazon DocumentDB 5.0 (Engine Pat -December 18, 2024 | 5.0.0 | **New features** **Amazon DocumentDB 5.0 (Engine Patch Version 3.0.5721)** Amazon DocumentDB instance-based clusters now support NVMe-backed R6GD instances. For more information, see [NVMe-backed instances](./db-instance-nvme.html) and this [what's new blog post](https://aws.amazon.com/about-aws/whats-new/2024/12/nvme-backed-r6gd-instances-amazon-documentdb-mongodb-compatibility/). -November 6, 2024 | 5.0.0 | **New features** **Amazon DocumentDB 5.0 (Engine Patch Version 3.0.11051)** +December 18, 2024 | **New features** **Amazon DocumentDB 5.0 (Engine Patch Version 3.0.5721)** Amazon DocumentDB instance-based clusters now support NVMe-backed R6GD instances. For more information, see [NVMe-backed instances](./db-instance-nvme.html) and this [what's new blog post](https://aws.amazon.com/about-aws/whats-new/2024/12/nvme-backed-r6gd-instances-amazon-documentdb-mongodb-compatibility/). +November 6, 2024 | **New features** **Amazon DocumentDB 5.0 (Engine Patch Version 3.0.11051)** @@ -175 +215 @@ November 6, 2024 | 5.0.0 | **New features** **Amazon DocumentDB 5.0 (Engine Pat -September 17, 2024 | 5.0.0 | **New features** **Amazon DocumentDB 5.0 (Engine Patch Version 3.0.10696)** Amazon DocumentDB now supports rebuilding indexes with `reIndex` in the `runCommand`. For more information, see [Index maintenance using reIndex](./managing-indexes.html#reIndex). +September 17, 2024 | **New features** **Amazon DocumentDB 5.0 (Engine Patch Version 3.0.10696)** Amazon DocumentDB now supports rebuilding indexes with `reIndex` in the `runCommand`. For more information, see [Index maintenance using reIndex](./managing-indexes.html#reIndex). @@ -185 +225 @@ September 17, 2024 | 5.0.0 | **New features** **Amazon DocumentDB 5.0 (Engine P -August 22, 2024 | 5.0.0 | **New feature** **Amazon DocumentDB 5.0 (All engine patch versions)** Amazon DocumentDB global clusters now support cluster switchovers and managed cluster failovers. For more information, see [Performing a switchover for an Amazon DocumentDB global cluster](./global-clusters-disaster-recovery.html#global-cluster-switchover) and [Performing a managed failover for an Amazon DocumentDB global cluster](./global-clusters-disaster-recovery.html#managed-failover). +August 22, 2024 | **New feature** **Amazon DocumentDB 5.0 (All engine patch versions)** Amazon DocumentDB global clusters now support cluster switchovers and managed cluster failovers. For more information, see [Performing a switchover for an Amazon DocumentDB global cluster](./global-clusters-disaster-recovery.html#global-cluster-switchover) and [Performing a managed failover for an Amazon DocumentDB global cluster](./global-clusters-disaster-recovery.html#managed-failover). @@ -190 +230 @@ Global cluster switchovers and failovers are supported on Amazon DocumentDB 4.0 -July 23, 2024 | 5.0.0 | **New features** **Amazon DocumentDB 5.0 (Engine Patch Version 3.0.8126)** +July 23, 2024 | **New features** **Amazon DocumentDB 5.0 (Engine Patch Version 3.0.8126)** @@ -224 +264 @@ Enhanced the logic to synchronize `CurrentTime` and `ResumeToken` for the change -July 22, 2024 | 5.0.0 | **New features** **Amazon DocumentDB 5.0 (Engine Patch Version 3.0.6742)** +July 22, 2024 | **New features** **Amazon DocumentDB 5.0 (Engine Patch Version 3.0.6742)** @@ -235,2 +275,2 @@ For more information, see [Managing collection-level document compression](./doc -July 9, 2024 | 5.0.0 | **New feature** For Amazon DocumentDB 5.0 (minimum engine patch version 3.0.4780), TLS CA certificate updates no longer require a system reboot. For more information, see [Updating your Amazon DocumentDB TLS certificates](./ca_cert_rotation.html). -May 29, 2024 | 5.0.0 | **New features** **Amazon DocumentDB 5.0 (Engine Patch Version 3.0.6742)** +July 9, 2024 | **New feature** For Amazon DocumentDB 5.0 (minimum engine patch version 3.0.4780), TLS CA certificate updates no longer require a system reboot. For more information, see [Updating your Amazon DocumentDB TLS certificates](./ca_cert_rotation.html). +May 29, 2024 | **New features** **Amazon DocumentDB 5.0 (Engine Patch Version 3.0.6742)** @@ -242 +282 @@ May 29, 2024 | 5.0.0 | **New features** **Amazon DocumentDB 5.0 (Engine Patch V -April 3, 2024 | 5.0.0 | **New features** **Amazon DocumentDB 5.0 (Engine Patch Version 3.0.5721)** +April 3, 2024 | **New features** **Amazon DocumentDB 5.0 (Engine Patch Version 3.0.5721)** @@ -250 +290 @@ April 3, 2024 | 5.0.0 | **New features** **Amazon DocumentDB 5.0 (Engine Patch -January 10, 2024 | 5.0.0 | **New features** **Amazon DocumentDB 5.0 (Engine Patch Versions 3.0.4574, 3.0.4780, 3.0.4960)** +January 10, 2024 | **New features** **Amazon DocumentDB 5.0 (Engine Patch Versions 3.0.4574, 3.0.4780, 3.0.4960)** @@ -267,3 +307,3 @@ January 10, 2024 | 5.0.0 | **New features** **Amazon DocumentDB 5.0 (Engine Pat -November 29, 2023 | 5.0.0 | **New features** **Amazon DocumentDB 5.0 (Engine Patch Version 3.0.3727)** Added support for vector search. For more information, see this [blog post](https://aws.amazon.com/blogs/aws/vector-search-for-amazon-documentdb-with-mongodb-compatibility-is-now-generally-available/) and visit [Vector search for Amazon DocumentDB](./vector-search.html) in the _Amazon DocumentDB Developer Guide_. -November 21, 2023 | 5.0.0 | **New features** **Amazon DocumentDB 5.0 (Engine Patch Version 3.0.3727)** Added support for I/O-optimized storage. For more information, see [Amazon DocumentDB cluster storage configurations](./db-cluster-storage-configs.html) in the _Amazon DocumentDB Developer Guide_. Added integration for no-code machine learning with SageMaker Canvas. For more information, see [No-code machine learning with Amazon SageMaker AI Canvas](./no-code-machine-learning.html) in the _Amazon DocumentDB Developer Guide_. -November 6, 2023 | 5.0.0 | **Amazon DocumentDB 5.0 (Engine Patch Versions 3.0.3727)** **New features** +November 29, 2023 | **New features** **Amazon DocumentDB 5.0 (Engine Patch Version 3.0.3727)** Added support for vector search. For more information, see this [blog post](https://aws.amazon.com/blogs/aws/vector-search-for-amazon-documentdb-with-mongodb-compatibility-is-now-generally-available/) and visit [Vector search for Amazon DocumentDB](./vector-search.html) in the _Amazon DocumentDB Developer Guide_. +November 21, 2023 | **New features** **Amazon DocumentDB 5.0 (Engine Patch Version 3.0.3727)** Added support for I/O-optimized storage. For more information, see [Amazon DocumentDB cluster storage configurations](./db-cluster-storage-configs.html) in the _Amazon DocumentDB Developer Guide_. Added integration for no-code machine learning with SageMaker Canvas. For more information, see [No-code machine learning with Amazon SageMaker AI Canvas](./no-code-machine-learning.html) in the _Amazon DocumentDB Developer Guide_. +November 6, 2023 | **Amazon DocumentDB 5.0 (Engine Patch Versions 3.0.3727)** **New features** @@ -276,2 +316,2 @@ November 6, 2023 | 5.0.0 | **Amazon DocumentDB 5.0 (Engine Patch Versions 3.0.3 -September 15, 2023 | 5.0.0 | **New features** **Amazon DocumentDB 5.0 (Engine Patch Version 3.0.3140)** Added support for $jsonSchema schema validator in instance-based clusters only. For more information see [Using JSON schema validation](./json-schema-validation.html). -July 13, 2023 | 5.0.0 | **New features** **Amazon DocumentDB 5.0 (Engine Patch Version 3.0.1948)** +September 15, 2023 | **New features** **Amazon DocumentDB 5.0 (Engine Patch Version 3.0.3140)** Added support for $jsonSchema schema validator in instance-based clusters only. For more information see [Using JSON schema validation](./json-schema-validation.html). +July 13, 2023 | **New features** **Amazon DocumentDB 5.0 (Engine Patch Version 3.0.1948)** @@ -289 +329 @@ July 13, 2023 | 5.0.0 | **New features** **Amazon DocumentDB 5.0 (Engine Patch -June 7, 2023 | 5.0.0 | **Bug fixes and other changes** **Amazon DocumentDB 5.0** +June 7, 2023 | **Bug fixes and other changes** **Amazon DocumentDB 5.0** @@ -295 +335 @@ June 7, 2023 | 5.0.0 | **Bug fixes and other changes** **Amazon DocumentDB 5.0* -May 10, 2023 | 5.0.0 | **Bug fixes and other changes** **Amazon DocumentDB 5.0 (Engine Patch Version 3.0.1361)** +May 10, 2023 | **Bug fixes and other changes** **Amazon DocumentDB 5.0 (Engine Patch Version 3.0.1361)** @@ -302 +342 @@ May 10, 2023 | 5.0.0 | **Bug fixes and other changes** **Amazon DocumentDB 5.0 -March 1, 2023 | 5.0.0 | **New features** **Amazon DocumentDB 5.0 (Engine Patch Version 3.0.775)** +March 1, 2023 | **New features** **Amazon DocumentDB 5.0 (Engine Patch Version 3.0.775)** @@ -326,0 +367,7 @@ Date | Release notes +August 18, 2026 | **Security and stability improvements** **Amazon DocumentDB 4.0 (Engine Version: 2.0.14287) [in progress]** This optional engine patch provides the following improvements: + + * **Improved request processing** Amazon DocumentDB now validates incoming client requests more thoroughly along the connection and message-parsing path. This improves resilience and stability across a wider range of input patterns. + * **Authentication handshake hardening** Amazon DocumentDB now validates the authentication exchange more thoroughly. This improves robustness when handling unexpected or malformed input. + * **Access-control enforcement** Amazon DocumentDB now verifies required privileges consistently at all nesting levels for nested query operations. + +If you don't apply it sooner, Amazon DocumentDB automatically applies this patch during your next maintenance window 30 days after release. @@ -594 +641,7 @@ Date | Release notes -April 27, 2026 | **New features** **Amazon DocumentDB 3.6 (Engine Version: 1.0.208692) [in progress]** This update provides an optional engine patch with the following improvements: +August 18, 2026 | **Security and stability improvements** **Amazon DocumentDB 3.6 (Engine Version: 1.0.208702) [in progress]** This optional engine patch provides the following improvements: + + * **Improved request processing** Amazon DocumentDB now validates incoming client requests more thoroughly along the connection and message-parsing path. This improves resilience and stability across a wider range of input patterns. + * **Authentication handshake hardening** Amazon DocumentDB now validates the authentication exchange more thoroughly. This improves robustness when handling unexpected or malformed input. + +If you don't apply it sooner, Amazon DocumentDB automatically applies this patch during your next maintenance window 30 days after release. +April 27, 2026 | **New features** **Amazon DocumentDB 3.6 (Engine Version: 1.0.208692)** This update provides an optional engine patch with the following improvements: