Amazon RDS Custom for SQL Server Receives Latest Security Updates

Amazon Web Services (AWS) has rolled out significant security enhancements for its Amazon RDS Custom for SQL Server offering, integrating the latest Cumulative Updates (CU) and General Distribution Release (GDR) updates for Microsoft SQL Server. This proactive measure ensures that customers leveraging RDS Custom for their SQL Server workloads can maintain a robust security posture against evolving cyber threats. The updates specifically target and remediate vulnerabilities, notably CVE-2026-40370, which is a critical step in safeguarding sensitive data and ensuring operational continuity. The newly supported versions include SQL Server 2019 CU32+GDR KB5090407 (RDS version 15.00.4470.1.v1) and SQL Server 2022 CU25 KB5081477 (RDS version 15.00.4255.1.v1). These updates are not merely security patches but also encompass various improvements and bug fixes from Microsoft, contributing to overall database stability and performance. By providing these updates, AWS empowers its users to keep their database environments current without the overhead of managing underlying infrastructure. Customers can easily apply these recommended updates to their Amazon RDS Custom for SQL Server instances through familiar AWS tools. The process can be initiated via the AWS Management Console, offering a user-friendly graphical interface, or programmatically using the AWS SDK or AWS Command Line Interface (CLI) for automated deployments. This flexibility caters to different operational preferences, from manual updates to integration within existing CI/CD pipelines. This announcement highlights AWS's continuous commitment to the shared responsibility model, where AWS is responsible for the security *of* the cloud, and customers are responsible for security *in* the cloud. By providing timely updates for underlying software, AWS helps customers fulfill their responsibility of maintaining secure and compliant database instances. The availability of these updates is vital for organizations that need to adhere to strict regulatory compliance standards and internal security policies, as it allows them to promptly address identified vulnerabilities and reduce their attack surface. The integration of these updates into Amazon RDS Custom for SQL Server simplifies the patching process for database administrators, reducing the manual effort and potential for errors associated with self-managed database systems. This allows organizations to focus more on their core business objectives and less on routine security maintenance, while still benefiting from the deep control offered by RDS Custom.