AWS cli: Clarify DB cluster encryption key type docs
Summary
Updated the Encrypted field description for DBCluster to explain AWS managed vs customer managed keys and note that data at rest is still encrypted when using an AWS owned key (StorageEncryptionType sse-rds). Also updated navigation links and AWS CLI version reference to 2.38.3.
Security assessment
Clarifies encryption key-type semantics for RDS DB clusters, noting data at rest is still encrypted with an AWS owned key. This is security documentation rather than a fix for a specific vulnerability.
Evidence
>> Specifies whether the DB cluster is encrypted with an Amazon Web Services managed key or a customer managed key.
Diff
diff --git a/cli/latest/reference/rds/create-db-cluster.md b/cli/latest/reference/rds/create-db-cluster.md index 3914283..e016a04 100644 --- a//cli/latest/reference/rds/create-db-cluster.md +++ b//cli/latest/reference/rds/create-db-cluster.md @@ -14,2 +14,2 @@ - * [previous](create-custom-db-engine-version.html "create-custom-db-engine-version") | - * [AWS CLI 2.38.2 Command Reference](../../index.html) » + * [previous](create-db-capacity-reservation.html "create-db-capacity-reservation") | + * [AWS CLI 2.38.3 Command Reference](../../index.html) » @@ -22 +22 @@ - * [← create-custom-db-engine-version](create-custom-db-engine-version.html "previous chapter \(use the left arrow\)") / + * [← create-db-capacity-reservation](create-db-capacity-reservation.html "previous chapter \(use the left arrow\)") / @@ -1733 +1733,3 @@ DBCluster -> (structure) ->> Indicates whether the DB cluster is encrypted. +>> Specifies whether the DB cluster is encrypted with an Amazon Web Services managed key or a customer managed key. +>> +>> If the DB cluster is encrypted with an Amazon Web Services owned key, this value is `false` and `StorageEncryptionType` is `sse-rds` . In that case, the data at rest is still encrypted. To determine how the data at rest is protected, use `StorageEncryptionType` . @@ -2389 +2391 @@ DBCluster -> (structure) - * [← create-custom-db-engine-version](create-custom-db-engine-version.html "previous chapter \(use the left arrow\)") / + * [← create-db-capacity-reservation](create-db-capacity-reservation.html "previous chapter \(use the left arrow\)") / @@ -2398,2 +2400,2 @@ DBCluster -> (structure) - * [previous](create-custom-db-engine-version.html "create-custom-db-engine-version") | - * [AWS CLI 2.38.2 Command Reference](../../index.html) » + * [previous](create-db-capacity-reservation.html "create-db-capacity-reservation") | + * [AWS CLI 2.38.3 Command Reference](../../index.html) »