All skills
aws avatar

/amazon-aurora-postgresql

@a9d1c70

Amazon Aurora PostgreSQL — creates, modifies, and advises on Aurora PostgreSQL clusters specifically (PostgreSQL-compatible engine, Aurora serverless, express configuration, pgvector, Babelfish). Trigger for Aurora PostgreSQL cluster operations, express-configuration quick-start, ACU sizing, I/O-Optimized storage, commitment pricing, or PostgreSQL upgrade planning. For Aurora MySQL, use amazon-aurora-mysql instead. Contains safety guardrails, express-first routing, and response templates that override defaults.

Use this Skill: https://skilld.dev/gh/aws/agent-toolkit-for-aws/amazon-aurora-postgresql

This session only. Nothing lands on disk.

referencesupgrade-planning-post-checklist.md

≈745 tokens on demand. Your agent reads this file only when SKILL.md points to it.

Post-Upgrade Checklist

Common Steps

  1. Verify upgrade completed

    aws rds describe-db-clusters --db-cluster-identifier {cluster} \
      --query "DBClusters[0].{Engine:Engine,EngineVersion:EngineVersion,Status:Status}" \
      --output json --region {region}
  2. Preserve the rollback window — do NOT delete pre-upgrade snapshots immediately. Major version upgrades are one-way in-place. Rollback requires restoring from a snapshot or PITR, and both restore the old major version:

    • Any pre-upgrade manual snapshot restores to the engine version it was taken on (e.g., an Aurora PostgreSQL 15.4 snapshot restores to 15.4 — not to a post-upgrade 16.4).
    • PITR to any time before the upgrade completed restores the pre-upgrade major version, not the new one.
    • After the upgrade, Aurora cannot restore backward-in-time into the new major version; that timeline starts at the upgrade's completion.

    Keep the pre-upgrade manual snapshot for at least 7–14 days of stable production traffic (longer for regulated workloads) before deleting it. Deleting it early forecloses the cheapest rollback path. Document the snapshot identifier and retain-until date in your change record.

  3. Check performance discrepancies — Compare CloudWatch metrics against baseline: CPUUtilization, DatabaseConnections, ReadLatency, WriteLatency, FreeableMemory, BufferCacheHitRatio, DMLLatency, SelectLatency. Use Performance Insights to compare database load.

  4. Compare EXPLAIN plans for critical queries. Look for: different join strategies, missing index usage, full table scans.

    • EXPLAIN (ANALYZE, BUFFERS, FORMAT JSON) SELECT ...;
  5. Monitor CloudWatch 24-72 hours — Watch: CPUUtilization, FreeableMemory, DatabaseConnections, ReadLatency, WriteLatency, AuroraReplicaLag, Deadlocks, LoginFailures.

  6. Validate application connectivity — connections, pooling, SSL/TLS.

  7. Verify parameter group applied correctly:

    aws rds describe-db-cluster-parameters --db-cluster-parameter-group-name {new_pg} \
      --query "Parameters[?Source=='user'].{Name:ParameterName,Value:ParameterValue}" \
      --output table --region {region}
  8. Update statistics — run ANALYZE (Aurora autovacuum runs it too, but a one-time manual pass post-upgrade is insurance).

  9. Check error logs

    aws rds describe-events --source-identifier {cluster} --source-type db-cluster --duration 1440 --region {region}

Aurora PostgreSQL-Specific

  1. Verify extensions working — SELECT extname, extversion FROM pg_extension; Update if needed: ALTER EXTENSION {name} UPDATE;

  2. REINDEX hash indexes if upgrading from < PG 10.

  3. Verify pg_stat_statements collecting data:

    SELECT calls, query FROM pg_stat_statements ORDER BY total_exec_time DESC LIMIT 10;
  4. Run VACUUM ANALYZE on large tables to update planner statistics.

Source: SKILL.md on GitHub

No alerts3mo3 checks · Risk SAFE
  • Gen Agent Trust Hub3mo

    This skill provides a modular and secure toolkit for managing Amazon Aurora PostgreSQL. It features robust safety guardrails, including multi-tier confirmation models and explicit refusal of destructive operations. The integrated analysis scripts utilize official AWS data sources and adhere to the principle of least privilege, emphasizing short-lived IAM authentication for database connectivity.

  • Socket3mo

    No alerts

  • Snyk3mo

    Risk: LOW · No issues

Signed by skilld at a9d1c70. This ties the file your Agent reads to that commit on GitHub. It does not review the instructions.

Last checked against GitHub yesterday.

Activeupdated 4 months ago
version
1

README badge

README badge for aws/agent-toolkit-for-aws/amazon-aurora-postgresql