AWS cli: Clarify DB cluster snapshot encryption key type description

Service: cli · 2026-10-21 · Documentation medium

File: cli/latest/reference/rds/delete-db-cluster-snapshot.md · Type: encryption

Summary

Rewrites the Encrypted field description to distinguish AWS managed/owned keys from customer managed keys and points to StorageEncryptionType (sse-rds) to determine how data at rest is protected.

Security assessment

Improves accuracy of encryption-at-rest documentation, clarifying that a false Encrypted value with sse-rds still means data is encrypted. This is security documentation, not a fix for a specific vulnerability.

Evidence

>> Specifies whether the DB cluster snapshot is encrypted with an Amazon Web Services managed key or a customer managed key.

Diff

diff --git a/cli/latest/reference/rds/delete-db-cluster-snapshot.md b/cli/latest/reference/rds/delete-db-cluster-snapshot.md
index 97a44af..ecd20f7 100644
--- a//cli/latest/reference/rds/delete-db-cluster-snapshot.md
+++ b//cli/latest/reference/rds/delete-db-cluster-snapshot.md
@@ -15 +15 @@
-  * [AWS CLI 2.38.2 Command Reference](../../index.html) »
+  * [AWS CLI 2.38.3 Command Reference](../../index.html) »
@@ -352 +352,3 @@ DBClusterSnapshot -> (structure)
->> Indicates whether the DB cluster snapshot is encrypted.
+>> Specifies whether the DB cluster snapshot is encrypted with an Amazon Web Services managed key or a customer managed key.
+>> 
+>> If the DB cluster snapshot is encrypted with an Amazon Web Services owned key, this value is `false` and `StorageEncryptionType` is `sse-rds` . In that case, the data at rest is still encrypted. To determine how the data at rest is protected, use `StorageEncryptionType` .
@@ -448 +450 @@ DBClusterSnapshot -> (structure)
-  * [AWS CLI 2.38.2 Command Reference](../../index.html) »
+  * [AWS CLI 2.38.3 Command Reference](../../index.html) »