AWS Security ChangesHomeSearch

AWS AmazonRDS medium security documentation change

Service: AmazonRDS · 2025-05-10 · Security-related medium

File: AmazonRDS/latest/AuroraPostgreSQLReleaseNotes/AuroraPostgreSQL.Extensions.md

Summary

Added documentation about extension lifecycle management including version support timelines and security-related termination policies

Security assessment

Explicitly states AWS may end extension support with <12 months notice for security issues, indicating security considerations in extension management. The phrase 'in cases involving security or other critical issues' provides concrete evidence of security relevance.

Diff

diff --git a/AmazonRDS/latest/AuroraPostgreSQLReleaseNotes/AuroraPostgreSQL.Extensions.md b/AmazonRDS/latest/AuroraPostgreSQLReleaseNotes/AuroraPostgreSQL.Extensions.md
index e72330a2c..844bc2ef4 100644
--- a//AmazonRDS/latest/AuroraPostgreSQLReleaseNotes/AuroraPostgreSQL.Extensions.md
+++ b//AmazonRDS/latest/AuroraPostgreSQLReleaseNotes/AuroraPostgreSQL.Extensions.md
@@ -8,0 +9,6 @@ Extensions for PostgreSQL 17Extensions for PostgreSQL 16Extensions for PostgreSQ
+Aurora PostgreSQL support multiple extensions that enhance your database functionality. Each major engine version has a minimum supported extension version. When we release the first minor version of a new major engine, we publish the minimum supported extension version for that major engine version. We recommend that you upgrade to the latest version of each extension when you upgrade your DB cluster. Extension versions don't automatically upgrade during engine version upgrade workflows.
+
+AWS plans to offer the latest version of extensions in the next quarterly release after they become available. Each extension's versioning scheme, features, and compatibility are determined by the extension developers, not AWS.
+
+AWS might need to end support for extensions. When feasible, we provide 12 months notice before ending support for an extension. However, in cases involving security or other critical issues, we might need to end support for an extension or a specific version of an extension with less than 12 months notice or no notice across all supported engine versions. We might require you to upgrade to a newer version of an extension at any time and will provide instructions in such cases.
+