Amazon Aurora now supports post-quantum TLS key exchange

Amazon Aurora PostgreSQL-Compatible Edition now supports post-quantum TLS (PQ-TLS) key exchange, offering organizations additional cryptographic options for securing data transmitted between clients and the database. This feature is available starting with Aurora PostgreSQL versions 18 and higher, enabling users to modify the ssl_groups parameter to select approved cryptographic groups. The update allows alignment with evolving security policies without disrupting existing operations or compatibility.

The introduction of PQ-TLS key exchange reflects a proactive approach to cryptographic resilience amid growing concerns over quantum computing threats to traditional encryption methods. Amazon Aurora PostgreSQL maintains full compatibility with PostgreSQL while integrating these advanced security measures. Users can leverage existing tools and applications without modification, ensuring a smooth transition to enhanced encryption standards.

Amazon Aurora PostgreSQL provides additional capabilities such as scale-to-zero serverless compute, Aurora Global Database for multi-Region resilience, and Aurora I/O-Optimized for improved price performance on I/O-intensive workloads. These features operate alongside the new PQ-TLS support, reinforcing the service's focus on performance, availability, and security.

To implement post-quantum TLS key exchange, users can configure the ssl_groups parameter in Aurora PostgreSQL versions 18 and higher. The feature integrates with Amazon Aurora's built-in security and continuous backups, ensuring encrypted data remains protected both in transit and at rest. Documentation and guidance are available to assist users in adopting this security enhancement.