Aurora PostgreSQL adds post-quantum TLS key exchange
Aurora PostgreSQL adds post-quantum TLS key exchange. The change protects one part of communications and requires versions and clients to be validated; it does not make the entire database post-quantum.
News summary
On 29 October, AWS announced post-quantum TLS key exchange for Amazon Aurora PostgreSQL-Compatible Edition. Aurora PostgreSQL 18 and later versions allow the ssl_groups parameter to be modified and cryptographic groups to be selected from a list supported by the service.
The measure focuses on key exchange for TLS connections, which is one component of protecting data in transit. It does not mean that storage, applications and the entire communications chain automatically have post-quantum protection. Businesses that retain confidential information for long periods can incorporate it into their cryptographic inventory and compatibility testing.
Source: AWS — 29 October 2026
What to review in your business
Check the Aurora version and the compatibility of the drivers used by your applications. Changing cryptographic groups without testing clients can prevent necessary connections.
Document which connections use the new configuration and which services remain outside its scope. Avoid presenting a TLS adjustment as an overall security guarantee.
Concepts mentioned in this article: Storage
At Seintec, we help you review your cloud infrastructure and its dependencies to make informed plans for upcoming changes. Contact our team.
Contact SeintecRelated service
Cloud Services
Cloud services to scale your business.