AWS AmazonRDS: Style edit of IAM database auth token size guidance
Summary
Replaces 'e.g.' with 'for example' in the recommendation about ensuring database drivers do not truncate IAM authentication tokens. Guidance itself is unchanged.
Security assessment
Only an abbreviation was reworded from 'e.g.' to 'for example'; the underlying advice about token truncation and auth failure is identical, so no new security guidance is introduced.
Evidence
+ * The size of an IAM database authentication token depends on many things including the number of IAM tags, IAM service policies, ARN lengths, as well as other IAM and database properties. The minimum size of this token is generally about 1 KB but can be larger. Since this token is used as the password in the connection string to the database using IAM authentication, you should ensure that your database driver (for example, ODBC) and/or any tools do not limit or otherwise truncate this token due to its size. A truncated token will cause the authentication validation done by the database and IAM to fail.
Diff
diff --git a/AmazonRDS/latest/UserGuide/UsingWithRDS.IAMDBAuth.md b/AmazonRDS/latest/UserGuide/UsingWithRDS.IAMDBAuth.md index b0d76804c..6b463fb69 100644 --- a//AmazonRDS/latest/UserGuide/UsingWithRDS.IAMDBAuth.md +++ b//AmazonRDS/latest/UserGuide/UsingWithRDS.IAMDBAuth.md @@ -103 +103 @@ We recommend the following when using IAM database authentication: - * The size of an IAM database authentication token depends on many things including the number of IAM tags, IAM service policies, ARN lengths, as well as other IAM and database properties. The minimum size of this token is generally about 1 KB but can be larger. Since this token is used as the password in the connection string to the database using IAM authentication, you should ensure that your database driver (e.g., ODBC) and/or any tools do not limit or otherwise truncate this token due to its size. A truncated token will cause the authentication validation done by the database and IAM to fail. + * The size of an IAM database authentication token depends on many things including the number of IAM tags, IAM service policies, ARN lengths, as well as other IAM and database properties. The minimum size of this token is generally about 1 KB but can be larger. Since this token is used as the password in the connection string to the database using IAM authentication, you should ensure that your database driver (for example, ODBC) and/or any tools do not limit or otherwise truncate this token due to its size. A truncated token will cause the authentication validation done by the database and IAM to fail.