AWS RDS：如何将 SELECT PG_BUFFERCACHE 授予非 aws 超级用户

Question

安装https://www.postgresql.org/docs/9.1/pgbuffercache.html扩展后，我想从其他非超级用户访问pg_buffercache视图。

GRANT EXECUTE ON FUNCTION pg_buffercache_pages() TO test_monitoring;
GRANT SELECT ON pg_buffercache TO test_monitoring;

不起作用

根据https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.MasterAccounts.html RDS_SUPERUSER 角色有权“执行 PG_BUFFERCACHE_PAGES(), SELECT PG_BUFFERCACHE”

是否可以将相同的权限授予其他角色？

Answer 1

您可以rds_superuser创建一个函数和一个视图作为rds_superuser ：

CREATE FUNCTION buffercache_for_all()
   RETURNS TABLE (
      bufferid integer,
      relfilenode oid,
      reltablespace oid,
      reldatabase oid,
      relforknumber smallint,
      relblocknumber bigint,
      isdirty boolean,
      usagecount smallint,
      pinning_backends integer
   ) LANGUAGE sql SECURITY DEFINER SET search_path = pg_catalog AS
'SELECT p.bufferid,
       p.relfilenode,
       p.reltablespace,
       p.reldatabase,
       p.relforknumber,
       p.relblocknumber,
       p.isdirty,
       p.usagecount,
       p.pinning_backends
FROM public.pg_buffercache_pages() AS p(
        bufferid integer,
        relfilenode oid,
        reltablespace oid,
        reldatabase oid,
        relforknumber smallint,
        relblocknumber bigint,
        isdirty boolean,
        usagecount smallint,
        pinning_backends integer
     )';

CREATE VIEW buffercache_for_all AS SELECT * FROM buffercache_for_all();

然后将函数上的EXECUTE和视图上的SELECT授予应该允许查看信息的任何人。