AWS Security ChangesHomeSearch

AWS AmazonRDS: Add pre-upgrade checklist for RDS for Oracle major upgrades

Service: AmazonRDS · 2026-10-01 · Documentation medium

File: AmazonRDS/latest/UserGuide/USER_UpgradeDBInstance.Oracle.Major.md

Summary

Adds a new 'Pre-upgrade checklist for major version upgrades' section (and TOC entry) covering application compatibility, deprecated init parameters, option/parameter group compatibility, backup retention for automatic pre-upgrade snapshots, and read replica upgrade planning.

Security assessment

The change is primarily operational upgrade guidance, but it explicitly instructs users to keep backup retention > 0 so an automatic pre-upgrade snapshot exists for recovery, which is a data-recovery/availability best practice rather than a fix for a specific vulnerability.

Evidence

+  * Confirm that the backup retention period for your DB instance is greater than 0. This ensures that Amazon RDS takes an automatic pre-upgrade snapshot that you can use for recovery.

Diff

diff --git a/AmazonRDS/latest/UserGuide/USER_UpgradeDBInstance.Oracle.Major.md b/AmazonRDS/latest/UserGuide/USER_UpgradeDBInstance.Oracle.Major.md
index afce2fb..4cc6747 100644
--- a//AmazonRDS/latest/UserGuide/USER_UpgradeDBInstance.Oracle.Major.md
+++ b//AmazonRDS/latest/UserGuide/USER_UpgradeDBInstance.Oracle.Major.md
@@ -7 +7 @@
-Supported versions for major upgradesSupported instance classes for major upgradesGathering statistics before major upgradesAllowing major upgradesUpgrading to Oracle Database 26ai
+Supported versions for major upgradesSupported instance classes for major upgradesPre-upgrade checklist for major version upgradesGathering statistics before major upgradesAllowing major upgradesUpgrading to Oracle Database 26ai
@@ -22,0 +23,2 @@ Make sure that you thoroughly test any upgrade to verify that your applications
+  * Pre-upgrade checklist for major version upgrades
+
@@ -52,0 +55,21 @@ Your current Oracle DB instance might run on a DB instance class that isn't supp
+## Pre-upgrade checklist for major version upgrades
+
+Before you perform a major version upgrade of your RDS for Oracle DB instance, complete the following preparation steps:
+
+  * Verify that your applications are compatible with the target Oracle Database version. Test your application code, queries, and stored procedures against the target version.
+
+  * Check for deprecated initialization parameters in the target version. Remove or replace any parameters that are no longer supported.
+
+  * Verify that your option group is compatible with the target version. Some options require updates or have different settings for different major versions. To list the options available for a target version, run the [describe-option-group-options](https://docs.aws.amazon.com/cli/latest/reference/rds/describe-option-group-options.html) AWS CLI command, for example:
+    
+        aws rds describe-option-group-options --engine-name oracle-ee --major-engine-version 21
+
+  * Verify that your parameter group is compatible with the target version. Some parameters have different valid ranges or default values in newer versions.
+
+  * Confirm that the backup retention period for your DB instance is greater than 0. This ensures that Amazon RDS takes an automatic pre-upgrade snapshot that you can use for recovery.
+
+  * Plan for read replica upgrades. Amazon RDS upgrades read replicas automatically after the source DB instance upgrade completes. Factor the additional downtime for replicas into your maintenance window planning.
+
+
+
+