AWS AmazonRDS: Fix Aurora IAM DB auth example, drop --publicly-accessible flag
Summary
Corrects the sample create-db-cluster command (identifier mydbcluster, engine aurora-postgresql) and removes the --publicly-accessible option from the IAM DB authentication troubleshooting example.
Security assessment
Removing --publicly-accessible from a copy-pasteable CLI example eliminates guidance that could lead users to create an internet-reachable Aurora cluster, reducing unintended public exposure of a database; the engine/identifier fixes also ensure the example actually applies IAM DB auth as documented.
Evidence
- --publicly-accessible \
Diff
diff --git a/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.IAMDBAuth.Troubleshooting.md b/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.IAMDBAuth.Troubleshooting.md index faa4eb2..d1b6989 100644 --- a//AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.IAMDBAuth.Troubleshooting.md +++ b//AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.IAMDBAuth.Troubleshooting.md @@ -22 +22 @@ To export your IAM DB authentication error logs to CloudWatch Logs when creating - aws rds create-db-cluster --db-cluster-identifier mydbinstance \ + aws rds create-db-cluster --db-cluster-identifier mydbcluster \ @@ -24 +24 @@ To export your IAM DB authentication error logs to CloudWatch Logs when creating - --engine postgres \ + --engine aurora-postgresql \ @@ -28 +27,0 @@ To export your IAM DB authentication error logs to CloudWatch Logs when creating - --publicly-accessible \