AWS cli: RDS: clarify encryption field in reboot-db-cluster output
Summary
CLI reference version bump 2.38.2→2.38.3 and an expanded DBCluster 'Encrypted' field description covering AWS owned vs customer managed keys and the StorageEncryptionType indicator.
Security assessment
Only documentation changed: the DBCluster encryption field now distinguishes key ownership, while noting that data can still be encrypted at rest when the value is false. Encryption transparency documentation, not a remediation of a specific weakness.
Evidence
>>> Specifies whether the DB cluster is encrypted with an Amazon Web Services managed key or a customer managed key.
Diff
diff --git a/cli/latest/reference/rds/reboot-db-cluster.md b/cli/latest/reference/rds/reboot-db-cluster.md index 1a6c0ef..0829374 100644 --- a//cli/latest/reference/rds/reboot-db-cluster.md +++ b//cli/latest/reference/rds/reboot-db-cluster.md @@ -15 +15 @@ - * [AWS CLI 2.38.2 Command Reference](../../index.html) » + * [AWS CLI 2.38.3 Command Reference](../../index.html) » @@ -490 +490,3 @@ DBCluster -> (structure) ->> Indicates whether the DB cluster is encrypted. +>> Specifies whether the DB cluster is encrypted with an Amazon Web Services managed key or a customer managed key. +>> +>> If the DB cluster is encrypted with an Amazon Web Services owned key, this value is `false` and `StorageEncryptionType` is `sse-rds` . In that case, the data at rest is still encrypted. To determine how the data at rest is protected, use `StorageEncryptionType` . @@ -1156 +1158 @@ DBCluster -> (structure) - * [AWS CLI 2.38.2 Command Reference](../../index.html) » + * [AWS CLI 2.38.3 Command Reference](../../index.html) »