RDS PostgreSQL

Database Security Settings

2024-05-27 02:34:54

Password Complexity Requirements

The RDS-PostgreSQL instance requires that the database user password complexity meets the following requirements:

             The length is 8 to 32 characters.

             It can consist of at least three types among uppercase letters, lowercase letters, numbers, and special characters.

             Special characters include !@#$%^&*~()-+=.

Recommendations for Creating Users

When you use the CREATE USER or CREATE ROLE commands, it is recommended that you use the VALID UNTIL timestamp parameter to set the expiration time of the user password.

Account Description

When you create an RDS-PostgreSQL instance, the system will automatically create the following system accounts for the instance (not available for the users). They are used to provide comprehensive background operation and maintenance management services for the database instance.

²  Note

Attempting to delete, rename, or modify the passwords and permissions of these accounts may result in an instance error. Please operate with caution.

Instance System Account

             ctgadmin: The management account has the highest superuser permissions, which is used for querying and modifying instance information, troubleshooting, restoration, and more.

             ctgagent: A dedicated account for high-availability functions, which is used for high-availability components to perform related operations on instances.

             ctgbackup: A dedicated account for the backup function, which is used for background backup.

             ctgmonitor: A dedicated account for monitoring and collection, which is used for reading various monitoring views.

             ctgproxy: A dedicated account for the database proxy component, which is used by the database proxy component to perform related operations on the instance.


5dlJB3qUNbGk