Amazon Aurora PostgreSQL Now Supports Post-Quantum TLS Key Exchange via ssl_groups
Hi everyone, it's Shii-chan!
AWS What's New
aws.amazon.com
Today's news is about Aurora security. Post-quantum cryptography feels a little like the future, which is exciting!
What was announced?
According to AWS What's New, Amazon Aurora PostgreSQL-Compatible Edition now supports post-quantum TLS (PQ-TLS) key exchange. This gives you post-quantum cryptography options for encrypting your data in transit.
Why it matters
Connections to your database are protected by TLS, and now the key exchange has post-quantum options too. The key point is that you can choose cryptographic groups to align with your organization's security standards.
What changes
Amazon Aurora PostgreSQL versions 18 and higher support modification of the ssl_groups parameter. You can select cryptographic groups from the Amazon Aurora PostgreSQL allow list to match your organization's standards.
Dive Deep
Here is what the announcement tells us:
- Target: Amazon Aurora PostgreSQL-Compatible Edition versions 18 and higher
- Setting: modify the
ssl_groupsparameter - Choices: cryptographic groups on the Amazon Aurora PostgreSQL allow list
The announcement doesn't cover other details such as the contents of the allow list or Region availability. To get started, see the AWS getting started page.
Wrap-up
- Aurora PostgreSQL supports post-quantum TLS key exchange
- On versions 18 and higher, you can modify the
ssl_groupsparameter - Pick cryptographic groups from the allow list to fit your security standards
This is for you if you want to prepare your encryption for the future, or run Aurora in an environment with strict security requirements!
