AWS aurora-dsql documentation change
Summary
Removed preview notice, improved formatting with backticks, clarified PostgreSQL compatibility documentation, and enhanced descriptions of view security options
Security assessment
While not addressing specific vulnerabilities, the changes add explicit documentation about security-related view options including 'security_barrier' and 'security_invoker' properties. These options help prevent data leakage and control privilege escalation, making this security feature documentation addition. However, there's no indication this is responding to a specific security incident.
Diff
diff --git a/aurora-dsql/latest/userguide/working-with-postgresql-compatibility-supported-sql-subsets.md b/aurora-dsql/latest/userguide/working-with-postgresql-compatibility-supported-sql-subsets.md index 3a595fa0a..be8d1c089 100644 --- a//aurora-dsql/latest/userguide/working-with-postgresql-compatibility-supported-sql-subsets.md +++ b//aurora-dsql/latest/userguide/working-with-postgresql-compatibility-supported-sql-subsets.md @@ -7,2 +6,0 @@ CREATE TABLEALTER TABLECREATE VIEW ALTER VIEWDROP VIEW -Amazon Aurora DSQL is provided as a Preview service. To learn more, see [Betas and Previews ](https://aws.amazon.com/service-terms/) in the AWS Service Terms. - @@ -11 +9 @@ Amazon Aurora DSQL is provided as a Preview service. To learn more, see [Betas a -Aurora DSQL doesn't support all of the syntax in supported PostgreSQL SQL. For example, `CREATE TABLE` in PostgreSQL has a large number of clauses and parameters that Aurora DSQL doesn't support. This section describes the syntax of PostgreSQL syntax that Aurora DSQL does support for these commands. +This PostgreSQL section provides detailed information about supported expressions, focusing on commands with extensive parameter sets and subcommands. For example, CREATE TABLE in PostgreSQL offers many clauses and parameters. This section describes all the PostgreSQL syntax elements that Aurora DSQL supports for these commands. @@ -28 +26 @@ Aurora DSQL doesn't support all of the syntax in supported PostgreSQL SQL. For e -## CREATE TABLE +## `CREATE TABLE` @@ -65 +63 @@ Aurora DSQL doesn't support all of the syntax in supported PostgreSQL SQL. For e -## ALTER TABLE +## `ALTER TABLE` @@ -86 +84 @@ Aurora DSQL doesn't support all of the syntax in supported PostgreSQL SQL. For e -## CREATE VIEW +## `CREATE VIEW` @@ -307 +305 @@ New name for an existing column. -Do not throw an error if the view does not exist. A notice is issued in this case. +Don't throw an error if the view doesn't exist. A notice is issued in this case. @@ -312 +310 @@ Do not throw an error if the view does not exist. A notice is issued in this cas -These forms set or remove the default value for a column. A view column's default value is substituted into any `INSERT` or `UPDATE` command whose target is the view. The view's default will therefore take precedence over any default values from underlying relations. +These forms set or remove the default value for a column. The default value for a view column is substituted into any `INSERT` or `UPDATE` command where the target is the view. The default for the view will take precedence over any default values from underlying relations. @@ -329,2 +327,2 @@ The new schema for the view. -SET ( view_option_name [= view_option_value] [, ... ] ) -RESET ( view_option_name [, ... ] ) +`SET ( view_option_name [= view_option_value] [, ... ] )` +`RESET ( view_option_name [, ... ] )` @@ -333 +331 @@ RESET ( view_option_name [, ... ] ) -Sets or resets a view option. Currently supported options are below. +Sets or resets a view option. The following are supported options. @@ -335 +333 @@ Sets or resets a view option. Currently supported options are below. - * `check_option (enum)`—Changes the check option of the view. The value must be `local` or `cascaded`. + * `check_option (enum)` \- Changes the check option of the view. The value must be `local` or `cascaded`. @@ -337 +335 @@ Sets or resets a view option. Currently supported options are below. - * `security_barrier (boolean)`—Changes the security-barrier property of the view. The value must be a Boolean value, such as `true` or `false`. + * `security_barrier (boolean)` \- Changes the security-barrier property of the view. The value must be a Boolean value, such as `true` or `false`. @@ -339 +337 @@ Sets or resets a view option. Currently supported options are below. - * `security_invoker (boolean)`—Changes the security-barrier property of the view. The value must be a Boolean value, such as `true` or `false`. + * `security_invoker (boolean)` \- Changes the security-barrier property of the view. The value must be a Boolean value, such as `true` or `false`. @@ -346 +344 @@ Sets or resets a view option. Currently supported options are below. -For historical PG reasons, `ALTER TABLE` can be used with views too; but the only variants of `ALTER TABLE` that are allowed with views are equivalent to the ones shown previously. +For historical PostgreSQL reasons, `ALTER TABLE` can be used with views too; but the only variants of `ALTER TABLE` that are allowed with views are equivalent to the ones shown previously. @@ -369 +367 @@ Attaching a default column value to an updatable view. -## DROP VIEW +## `DROP VIEW` @@ -387 +385 @@ The `DROP VIEW` statement removes an existing view. Aurora DSQL supports the ful -Do not throw an error if the view does not exist. A notice is issued in this case. +Don't throw an error if the view doesn't exist. A notice is issued in this case. @@ -392 +390 @@ Do not throw an error if the view does not exist. A notice is issued in this cas -The name (optionally schema-qualified) of the view to remove.. +The name (optionally schema-qualified) of the view to remove.