Amazon Aurora now supports post-quantum TLS key exchange

Amazon Aurora PostgreSQL-Compatible Edition Updates

Starting today, Amazon Aurora PostgreSQL-Compatible Edition introduces support for post-quantum TLS (PQ-TLS) key exchange, providing post-quantum cryptography options for encrypting your data in transit.

Amazon Aurora PostgreSQL versions 18 and higher support modification of the ssl_groups parameter. You can select cryptographic groups from the Amazon Aurora PostgreSQL allow list to align with your organization's security standards.

Amazon Aurora is designed for high performance and availability at global scale with full PostgreSQL compatibility. It provides scale-to-zero serverless compute, Aurora Global Database for multi-Region resilience, Aurora I/O-Optimized for improved price performance on I/O-intensive workloads, and built-in security and continuous backups.

What to do

• Review the release notes for more details.
• Update your configurations to utilize the new PQ-TLS key exchange and cryptographic groups.
• Explore the getting started page to begin using Amazon Aurora.

Source: AWS release notes

If you need further guidance on AWS, our experts are available at AWS@westloop.io. You may also reach us by submitting the Contact Us form.