AWS aurora-dsql medium security documentation change
Summary
Added recommendations for PostgreSQL v17 client and SSL negotiation settings
Security assessment
The recommendation to use PostgreSQL v17 client and configure PGSSLNEGOTIATION=direct suggests security improvements, potentially addressing connection security or performance optimizations with security implications.
Diff
diff --git a/aurora-dsql/latest/userguide/getting-started.md b/aurora-dsql/latest/userguide/getting-started.md index 75460bad7..6db17efe4 100644 --- a//aurora-dsql/latest/userguide/getting-started.md +++ b//aurora-dsql/latest/userguide/getting-started.md @@ -92 +92,3 @@ Aurora DSQL uses the token only for authentication. The token doesn't affect the -The `psql` utility is a terminal-based front-end to PostgreSQL. It enables you to type in queries interactively, issue them to PostgreSQL, and see the query results. For more information about `psql`, see [https://www.postgresql.org/docs/current/app-psql.htm](https://www.postgresql.org/docs/current/app-psql.htm). To download the PostgreSQL-provided installers, see [PostgreSQL Downloads](https://www.postgresql.org/download/). +The `psql` utility is a terminal-based front-end to PostgreSQL. It enables you to type in queries interactively, issue them to PostgreSQL, and see the query results. To improve query response times, use the PostgreSQL version 17 client. + +Download your operating system's installer from the [PostgreSQL Downloads](https://www.postgresql.org/download/) page. For more information about `psql`, see [https://www.postgresql.org/docs/current/app-psql.htm](https://www.postgresql.org/docs/current/app-psql.htm). @@ -239,0 +242,4 @@ Authentication is managed using IAM so you don't need to store credentials in th +###### Note + +To optimize database connection speed, use the PostgreSQL version 17 client and set `PGSSLNEGOTIATION` to direct: `PGSSLNEGOTIATION=direct`. +