AWS cli: Clarify DB cluster encryption key type description
Summary
Rewrites the Encrypted field description to distinguish AWS managed/owned keys from customer managed keys and directs users to StorageEncryptionType (sse-rds) to determine how data at rest is protected.
Security assessment
Clarifies encryption-at-rest semantics for DB clusters, noting that AWS owned key encryption yields Encrypted=false but data is still encrypted. Security-relevant documentation, no specific vulnerability addressed.
Evidence
>> Specifies whether the DB cluster is encrypted with an Amazon Web Services managed key or a customer managed key.
Diff
diff --git a/cli/latest/reference/rds/delete-db-cluster.md b/cli/latest/reference/rds/delete-db-cluster.md index a6df750..853de2b 100644 --- a//cli/latest/reference/rds/delete-db-cluster.md +++ b//cli/latest/reference/rds/delete-db-cluster.md @@ -15 +15 @@ - * [AWS CLI 2.38.2 Command Reference](../../index.html) » + * [AWS CLI 2.38.3 Command Reference](../../index.html) » @@ -547 +547,3 @@ DBCluster -> (structure) ->> Indicates whether the DB cluster is encrypted. +>> Specifies whether the DB cluster is encrypted with an Amazon Web Services managed key or a customer managed key. +>> +>> If the DB cluster is encrypted with an Amazon Web Services owned key, this value is `false` and `StorageEncryptionType` is `sse-rds` . In that case, the data at rest is still encrypted. To determine how the data at rest is protected, use `StorageEncryptionType` . @@ -1213 +1215 @@ DBCluster -> (structure) - * [AWS CLI 2.38.2 Command Reference](../../index.html) » + * [AWS CLI 2.38.3 Command Reference](../../index.html) »