What problem does it solve? Working with Amazon Aurora DSQL requires navigating IAM token authentication, strict DDL constraints (one statement per transaction, async indexes only), transaction limits, and SQL injection risks when building queries from untrusted input. This Skill provides the scripts, reference guides, and enforced patterns to operate DSQL clusters correctly without memorizing every constraint. ## Core Features & Use Cases - Cluster Lifecycle Management: Create, list, inspect, and delete DSQL clusters via bundled bash scripts that wrap the AWS CLI with tagging and deletion protection. - IAM-Authenticated Query Execution: Run ad-hoc queries through psql-connect.sh, which handles token generation, TLS configuration, and single-statement guards. - Safe SQL Construction: Build every query with safe_query.build() validators (allow, regex, ident, keyword, literal) to prevent SQL injection from tenant IDs, UUIDs, sort columns, and free text. - Migration & Diagnostics: Execute table-recreation DDL migrations, MySQL-to-DSQL schema translation, and query-plan explainability workflows with EXPLAIN ANALYZE. - Use Case: A developer building a multi-tenant app asks the agent to create a DSQL cluster, set up scoped database roles, and write a Python service using the aurora-dsql-python-connector with tenant-isolated queries. ## Quick Start Ask the agent to create an Aurora DSQL cluster and connect to it with psql to list the tables in the public schema.
