What problem does it solve? Working with Amazon Aurora DSQL requires navigating IAM token authentication, DSQL-specific DDL constraints (one DDL per transaction, async indexes, no foreign keys), transaction limits, and SQL injection risks when building queries from untrusted input. This Skill provides the scripts, reference guides, and enforced patterns to perform DSQL operations correctly without memorizing every constraint. ## Core Features & Use Cases - Cluster Lifecycle Management: Create, list, inspect, and delete DSQL clusters via bundled bash scripts that wrap the AWS CLI with tagging and deletion protection. - IAM-Authenticated Query Execution: Run ad-hoc queries through psql-connect.sh, which handles auth token generation, TLS configuration, and single-statement guards. - Safe SQL Construction: Build every query with safe_query.build() validators (allow, regex, ident, keyword, literal) to prevent SQL injection from tenant IDs, UUIDs, sort columns, and free text. - Migration & Diagnostics: Execute table-recreation DDL migrations, MySQL-to-DSQL schema migrations, and structured query-plan diagnosis with EXPLAIN ANALYZE and GUC experiments. - Use Case: A developer building a multi-tenant app asks the agent to create a DSQL cluster, set up scoped database roles, and write a batch insert — the Skill enforces tenant_id isolation, 3,000-row transaction chunking, and validated SQL at every step. ## Quick Start Ask the agent to create an Aurora DSQL cluster and connect to it with psql to list the tables in the public schema.
