AWS AmazonRDS high security documentation change
Summary
Added documentation for apg_plan_mgmt version 2.9 across multiple Aurora PostgreSQL versions (17.5, 16.9, 15.13, 14.18, 13.21) with fixes for query plan enforcement issues and role management
Security assessment
The change explicitly states that the 'apg_plan_mgmt' role is now reserved and cannot be modified by users, which addresses a potential privilege escalation vulnerability where users could previously alter this role. This constitutes a security-related access control improvement.
Diff
diff --git a/AmazonRDS/latest/AuroraPostgreSQLReleaseNotes/auroraqpm.updates.md b/AmazonRDS/latest/AuroraPostgreSQLReleaseNotes/auroraqpm.updates.md index 383e3548d..cc96e2457 100644 --- a//AmazonRDS/latest/AuroraPostgreSQLReleaseNotes/auroraqpm.updates.md +++ b//AmazonRDS/latest/AuroraPostgreSQLReleaseNotes/auroraqpm.updates.md @@ -39,0 +40,2 @@ The AWS `apg_plan_mgmt` extension provides your Aurora PostgreSQL DB cluster wit + * apg_plan_mgmt version 2.9 for Aurora PostgreSQL 17.5, June 30, 2025 + @@ -44,0 +47,19 @@ The AWS `apg_plan_mgmt` extension provides your Aurora PostgreSQL DB cluster wit +### apg_plan_mgmt version 2.9 for Aurora PostgreSQL 17.5, June 30, 2025 + +Improvements to the `apg_plan_mgmt` extension in version 2.9 for Aurora PostgreSQL 17.5 include the following: + +###### Additional improvements and enhancements + + * Fixed an issue in query plan management with enforcement of Parallel Bitmap Scans when a BitmapOr/BitmapAnd operator is present. + + * Fixed an issue in query plan management with enforcement of plans where multiple table partitions are joined to one table partition. + + * Fixed an issue in query plan management with enforcement of Append nodes on top of a single table partition. + + * The `apg_plan_mgmt` role in query plan management is reserved and can no longer be created, altered or dropped by users. + + * Fixed an issue in handling parameter lists from previous versions of query plan management. + + + + @@ -76,0 +98,2 @@ Improvements to the `apg_plan_mgmt` extension in version 2.8 for Aurora PostgreS + * apg_plan_mgmt version 2.9 for Aurora PostgreSQL 16.9, June 30, 2025 + @@ -89,0 +113,19 @@ Improvements to the `apg_plan_mgmt` extension in version 2.8 for Aurora PostgreS +### apg_plan_mgmt version 2.9 for Aurora PostgreSQL 16.9, June 30, 2025 + +Improvements to the `apg_plan_mgmt` extension in version 2.9 for Aurora PostgreSQL 16.9 include the following: + +###### Additional improvements and enhancements + + * Fixed an issue in query plan management with enforcement of Parallel Bitmap Scans when a BitmapOr/BitmapAnd operator is present. + + * Fixed an issue in query plan management with enforcement of plans where multiple table partitions are joined to one table partition. + + * Fixed an issue in query plan management with enforcement of Append nodes on top of a single table partition. + + * The `apg_plan_mgmt` role in query plan management is reserved and can no longer be created, altered or dropped by users. + + * Fixed an issue in handling parameter lists from previous versions of query plan management. + + + + @@ -224,0 +267,2 @@ Improvements to the `apg_plan_mgmt` extension in version 2.6 for Aurora PostgreS + * apg_plan_mgmt version 2.9 for Aurora PostgreSQL 15.13, June 30, 2025 + @@ -243,0 +288,19 @@ Improvements to the `apg_plan_mgmt` extension in version 2.6 for Aurora PostgreS +### apg_plan_mgmt version 2.9 for Aurora PostgreSQL 15.13, June 30, 2025 + +Improvements to the `apg_plan_mgmt` extension in version 2.9 for Aurora PostgreSQL 15.13 include the following: + +###### Additional improvements and enhancements + + * Fixed an issue in query plan management with enforcement of Parallel Bitmap Scans when a BitmapOr/BitmapAnd operator is present. + + * Fixed an issue in query plan management with enforcement of plans where multiple table partitions are joined to one table partition. + + * Fixed an issue in query plan management with enforcement of Append nodes on top of a single table partition. + + * The `apg_plan_mgmt` role in query plan management is reserved and can no longer be created, altered or dropped by users. + + * Fixed an issue in handling parameter lists from previous versions of query plan management. + + + + @@ -458,0 +522,2 @@ To learn how to install, upgrade, and use the `apg_plan_mgmt` extension, see [ M + * apg_plan_mgmt version 2.9 for Aurora PostgreSQL 14.18, June 30, 2025 + @@ -475,0 +541,19 @@ To learn how to install, upgrade, and use the `apg_plan_mgmt` extension, see [ M +### apg_plan_mgmt version 2.9 for Aurora PostgreSQL 14.18, June 30, 2025 + +Improvements to the `apg_plan_mgmt` extension in version 2.9 for Aurora PostgreSQL 14.18 include the following: + +###### Additional improvements and enhancements + + * Fixed an issue in query plan management with enforcement of Parallel Bitmap Scans when a BitmapOr/BitmapAnd operator is present. + + * Fixed an issue in query plan management with enforcement of plans where multiple table partitions are joined to one table partition. + + * Fixed an issue in query plan management with enforcement of Append nodes on top of a single table partition. + + * The `apg_plan_mgmt` role in query plan management is reserved and can no longer be created, altered or dropped by users. + + * Fixed an issue in handling parameter lists from previous versions of query plan management. + + + + @@ -679,0 +764,2 @@ To learn how to install, upgrade, and use the `apg_plan_mgmt` extension, see [ M + * apg_plan_mgmt version 2.9 for Aurora PostgreSQL 13.21, June 30, 2025 + @@ -696,0 +783,19 @@ To learn how to install, upgrade, and use the `apg_plan_mgmt` extension, see [ M +### apg_plan_mgmt version 2.9 for Aurora PostgreSQL 13.21, June 30, 2025 + +Improvements to the `apg_plan_mgmt` extension in version 2.9 for Aurora PostgreSQL 13.21 include the following: + +###### Additional improvements and enhancements + + * Fixed an issue in query plan management with enforcement of Parallel Bitmap Scans when a BitmapOr/BitmapAnd operator is present. + + * Fixed an issue in query plan management with enforcement of plans where multiple table partitions are joined to one table partition. + + * Fixed an issue in query plan management with enforcement of Append nodes on top of a single table partition. + + * The `apg_plan_mgmt` role in Query Plan Management is reserved and can no longer be created, altered or dropped by users. + + * Fixed an issue in handling parameter lists from previous versions of Query Plan Management. + + + +