@aws/nx-plugin-mcp 1.0.0-rc.41 → 1.0.0-rc.43

package/docs/guides/py-rdb.mdx

@@ -13,6 +13,7 @@ import RunGenerator from '@components/run-generator.astro';
 import GeneratorParameters from '@components/generator-parameters.astro';
 import NxCommands from '@components/nx-commands.astro';
 import Snippet from '@components/snippet.astro';
+import OptionFilter from '@components/option-filter.astro';
 
 This generator creates a new Python relational database project backed by [Amazon Aurora](https://aws.amazon.com/rds/aurora/) (PostgreSQL or MySQL), [SQLModel](https://sqlmodel.tiangolo.com/) for data modelling, and [Alembic](https://alembic.sqlalchemy.org/) for schema migrations. It generates the application code and infrastructure needed to provision and manage a database using AWS CDK or Terraform, with declarative schema definition, automatic migration deployment, and a database client.
 
@@ -214,7 +215,15 @@ When using RDS Proxy, you do not need to configure the RDS CA bundle in the runt
 
 ### Logging and Monitoring
 
-<Snippet name="rdb/logging" />
+<OptionFilter when={{ engine: 'postgres' }}>
+<Snippet name="rdb/logging-postgres" />
+</OptionFilter>
+
+<OptionFilter when={{ engine: 'mysql' }}>
+<Snippet name="rdb/logging-mysql" />
+</OptionFilter>
+
+<Snippet name="rdb/performance-insights" />
 
 ### Encryption Key Rotation
 

package/docs/guides/ts-rdb.mdx

@@ -292,7 +292,15 @@ For more details, see the AWS Lambda [SSL/TLS requirements for Amazon RDS connec
 
 ### Logging and Monitoring
 
-<Snippet name="rdb/logging" />
+<OptionFilter when={{ engine: 'postgres' }}>
+<Snippet name="rdb/logging-postgres" />
+</OptionFilter>
+
+<OptionFilter when={{ engine: 'mysql' }}>
+<Snippet name="rdb/logging-mysql" />
+</OptionFilter>
+
+<Snippet name="rdb/performance-insights" />
 
 ### Encryption Key Rotation
 

package/docs/snippets/rdb/logging-mysql.mdx

@@ -0,0 +1,5 @@
+---
+title: MySQL Query Logging
+---
+
+The `audit` and `error` logs are exported for [Aurora MySQL](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/AuroraMySQL.Integrating.CloudWatch.html) — `general` and `slowquery` are deliberately excluded since they log full statement text, including DML values. [Advanced Auditing](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/AuroraMySQL.Auditing.html) is scoped to connections and DDL (`server_audit_events=CONNECT,QUERY_DDL`), so statement parameter values are never logged.

package/docs/snippets/rdb/logging-postgres.mdx

@@ -0,0 +1,5 @@
+---
+title: PostgreSQL Query Logging
+---
+
+The `postgresql` log is exported for [Aurora PostgreSQL](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/AuroraPostgreSQL.CloudWatch.html), with logging scoped to DDL statements only (`log_statement=ddl`) so statement parameter values are never logged — as long as each statement is sent on its own. `log_statement=ddl` logs the entire raw text of a multi-statement batch (e.g. a single `psql -c "a;b;c"` call) verbatim if any statement in it is DDL, including any DML values in that same batch.

package/docs/snippets/rdb/performance-insights.mdx

@@ -0,0 +1,34 @@
+---
+title: Performance Insights
+---
+import Infrastructure from '@components/infrastructure.astro';
+
+Performance Insights is enabled on the Aurora writer instance by default (encrypted with the cluster's KMS key). Aurora engine logs are also exported to [CloudWatch Logs](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_LogAccess.html) by default, configured to surface schema-level activity without leaking row data.
+
+Disable log export per database if not required:
+
+<Infrastructure>
+<Fragment slot="cdk">
+
+```ts title="packages/infra/src/stacks/application-stack.ts"
+import { MyDatabase } from ':my-scope/common-constructs';
+
+const db = new MyDatabase(this, 'Db', {
+  ...
+  enableCloudwatchLogs: false,
+  enablePerformanceInsights: false,
+});
+```
+</Fragment>
+<Fragment slot="terraform">
+
+```hcl title="packages/infra/src/main.tf"
+module "my_database" {
+  source = "../../common/terraform/src/app/dbs/my-database"
+  ...
+  enable_cloudwatch_logs      = false # disable if not required
+  enable_performance_insights = false # disable if not required
+}
+```
+</Fragment>
+</Infrastructure>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws/nx-plugin-mcp",
-  "version": "1.0.0-rc.41",
+  "version": "1.0.0-rc.43",
   "repository": {
     "type": "git",
     "url": "https://github.com/awslabs/nx-plugin-for-aws.git",

package/docs/snippets/rdb/logging.mdx

@@ -1,32 +0,0 @@
----
-title: Logging and Monitoring
----
-import Infrastructure from '@components/infrastructure.astro';
-
-Performance Insights is enabled on the Aurora writer instance by default (encrypted with the cluster's KMS key). You can also export the Aurora engine logs to [CloudWatch Logs](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_LogAccess.html) (`postgresql` for [Aurora PostgreSQL](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/AuroraPostgreSQL.CloudWatch.html); `audit`, `error`, `general` and `slowquery` for [Aurora MySQL](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/AuroraMySQL.Integrating.CloudWatch.html)). Enable log export per database:
-
-<Infrastructure>
-<Fragment slot="cdk">
-
-```ts title="packages/infra/src/stacks/application-stack.ts"
-import { MyDatabase } from ':my-scope/common-constructs';
-
-const db = new MyDatabase(this, 'Db', {
-  ...
-  enableCloudwatchLogs: true,
-  enablePerformanceInsights: false, // disable if not required
-});
-```
-</Fragment>
-<Fragment slot="terraform">
-
-```hcl title="packages/infra/src/main.tf"
-module "my_database" {
-  source = "../../common/terraform/src/app/dbs/my-database"
-  ...
-  enable_cloudwatch_logs      = true
-  enable_performance_insights = false # disable if not required
-}
-```
-</Fragment>
-</Infrastructure>