AWS aurora-dsql documentation change
Summary
Restructured documentation to add detailed tables of supported/unsupported PostgreSQL catalog tables and views. Expanded explanations of sys.jobs and sys.iam_pg_role_mappings views. Added section about ANALYZE command usage.
Security assessment
The change adds documentation for sys.iam_pg_role_mappings view which maps IAM roles to PostgreSQL permissions. While this relates to security features (access control), there is no evidence of addressing a specific vulnerability. The documentation improvement helps users understand security mappings but doesn't indicate a security fix.
Diff
diff --git a/aurora-dsql/latest/userguide/working-with-systems-tables.md b/aurora-dsql/latest/userguide/working-with-systems-tables.md index fb77b0f12..c05944614 100644 --- a//aurora-dsql/latest/userguide/working-with-systems-tables.md +++ b//aurora-dsql/latest/userguide/working-with-systems-tables.md @@ -5 +5 @@ -System tables and queries in Aurora DSQLAnalyze +System tablesThe ANALYZE command @@ -9 +9 @@ Amazon Aurora DSQL is provided as a Preview service. To learn more, see [Betas a -# Using system tables and commands in Aurora DSQL +# System tables and commands in Aurora DSQL @@ -13 +13 @@ See the following sections to learn about the supported system tables and catalo -## System tables and queries in Aurora DSQL +## System tables @@ -17 +17 @@ Aurora DSQL is compatible with PostgreSQL, so many [ system catalog tables](http -**Important Postgres catalog tables and views** +### Important PostgreSQL catalog tables and views @@ -23,10 +23,10 @@ Name | Description -pg_namespace | Information on all schemas -pg_tables | Information on the all tables -pg_attribute | Information on all attributes -pg_views | Information on (pre-)defined views -pg_class | Describes all tables, column, indices, and similar objects -pg_stats | A view on the planner statistics -pg_user | Information on users -pg_roles | Information on users and groups -pg_indexes | Lists all indexes -pg_constraint | Lists constraints on tables +`pg_namespace` | Information on all schemas +`pg_tables` | Information on the all tables +`pg_attribute` | Information on all attributes +`pg_views` | Information on (pre-)defined views +`pg_class` | Describes all tables, column, indices, and similar objects +`pg_stats` | A view on the planner statistics +`pg_user` | Information on users +`pg_roles` | Information on users and groups +`pg_indexes` | Lists all indexes +`pg_constraint` | Lists constraints on tables @@ -34 +34 @@ pg_constraint | Lists constraints on tables -**sys.jobs and sys.iam_pg_role_mappings** +### Supported and unsupported catalog tables @@ -36 +36 @@ pg_constraint | Lists constraints on tables -Aside from these tables and views, Aurora DSQL also adds the views `sys.jobs` and `sys.iam_pg_role_mappings` for your use cases. +The following table indicates which tables are supported and unsupported in Aurora DSQL. @@ -38 +38,156 @@ Aside from these tables and views, Aurora DSQL also adds the views `sys.jobs` an -`sys.jobs` provides status information about asynchronous jobs. For example, after you [create an async index](./working-with-create-index-async.html), Aurora DSQL returns a `job_uuid`. You can use this `job_uuid` with `sys.jobs` to look up the status of the job. +Name | Applicable to Aurora DSQL +---|--- +`pg_aggregate` | No +`pg_am` | Yes +`pg_amop` | No +`pg_amproc` | No +`pg_attrdef` | Yes +`pg_attribute` | Yes +`pg_authid` | No (use `pg_roles`) +`pg_auth_members` | Yes +`pg_cast` | Yes +`pg_class` | Yes +`pg_collation` | Yes +`pg_constraint` | Yes +`pg_conversion` | No +`pg_database` | No +`pg_db_role_setting` | Yes +`pg_default_acl` | Yes +`pg_depend` | Yes +`pg_description` | Yes +`pg_enum` | No +`pg_event_trigger` | No +`pg_extension` | No +`pg_foreign_data_wrapper` | No +`pg_foreign_server` | No +`pg_foreign_table` | No +`pg_index` | Yes +`pg_inherits` | Yes +`pg_init_privs` | No +`pg_language` | No +`pg_largeobject` | No +`pg_largeobject_metadata` | Yes +`pg_namespace` | Yes +`pg_opclass` | No +`pg_operator` | Yes +`pg_opfamily` | No +`pg_parameter_acl` | Yes +`pg_partitioned_table` | Yes +`pg_policy` | No +`pg_proc` | No +`pg_publication` | No +`pg_publication_namespace` | No +`pg_publication_rel` | No +`pg_range` | Yes +`pg_replication_origin` | No +`pg_rewrite` | No +`pg_seclabel` | No +`pg_sequence` | No +`pg_shdepend` | Yes +`pg_shdescription` | Yes +`pg_shseclabel` | No +`pg_statistic` | Yes +`pg_statistic_ext` | No +`pg_statistic_ext_data` | No +`pg_subscription` | No +`pg_subscription_rel` | No +`pg_tablespace` | Yes +`pg_transform` | No +`pg_trigger` | No +`pg_ts_config` | Yes +`pg_ts_config_map` | Yes +`pg_ts_dict` | Yes +`pg_ts_parser` | Yes +`pg_ts_template` | Yes +`pg_type` | Yes +`pg_user_mapping` | No + +### Supported and unsupported system views + +The following table indicates which views are supported and unsupported in Aurora DSQL. + +Name | Applicable to Aurora DSQL +---|--- +`pg_available_extensions` | No +`pg_available_extension_versions` | No +`pg_backend_memory_contexts` | Yes +`pg_config` | No +`pg_cursors` | No +`pg_file_settings` | No +`pg_group` | Yes +`pg_hba_file_rules` | No +`pg_ident_file_mappings` | No +`pg_indexes` | Yes +`pg_locks` | No +`pg_matviews` | No +`pg_policies` | No +`pg_prepared_statements` | No +`pg_prepared_xacts` | No +`pg_publication_tables` | No +`pg_replication_origin_status` | No +`pg_replication_slots` | No +`pg_roles` | Yes +`pg_rules` | No +`pg_seclabels` | No +`pg_sequences` | No +`pg_settings` | Yes +`pg_shadow` | Yes +`pg_shmem_allocations` | Yes +`pg_stats` | Yes +`pg_stats_ext` | No +`pg_stats_ext_exprs` | No +`pg_tables` | Yes +`pg_timezone_abbrevs` | Yes +`pg_timezone_names` | Yes +`pg_user` | Yes +`pg_user_mappings` | No +`pg_views` | Yes +`pg_stat_activity` | No +`pg_stat_replication` | No +`pg_stat_replication_slots` | No +`pg_stat_wal_receiver` | No +`pg_stat_recovery_prefetch` | No +`pg_stat_subscription` | No +`pg_stat_subscription_stats` | No +`pg_stat_ssl` | Yes +`pg_stat_gssapi` | No +`pg_stat_archiver` | No +`pg_stat_io` | No +`pg_stat_bgwriter` | No +`pg_stat_wal` | No +`pg_stat_database` | No +`pg_stat_database_conflicts` | No +`pg_stat_all_tables` | No +`pg_stat_all_indexes` | No +`pg_statio_all_tables` | No +`pg_statio_all_indexes` | No +`pg_statio_all_sequences` | No +`pg_stat_slru` | No +`pg_statio_user_tables` | No +`pg_statio_user_sequences` | No +`pg_stat_user_functions` | No +`pg_stat_user_indexes` | No +`pg_stat_progress_analyze` | No +`pg_stat_progress_basebackup` | No +`pg_stat_progress_cluster` | No +`pg_stat_progress_create_index` | No +`pg_stat_progress_vacuum` | No +`pg_stat_sys_indexes` | No +`pg_stat_sys_tables` | No +`pg_stat_xact_all_tables` | No +`pg_stat_xact_sys_tables` | No +`pg_stat_xact_user_functions` | No +`pg_stat_xact_user_tables` | No +`pg_statio_sys_indexes` | No +`pg_statio_sys_sequences` | No +`pg_statio_sys_tables` | No +`pg_statio_user_indexes` | No + +### The sys.jobs and sys.iam_pg_role_mappings views + +Aurora DSQL supports the following system views: + +`sys.jobs` + +