ALTER CLUSTER

Function

ALTER CLUSTER is used to rotate fine-grained TDE keys. When a fine-grained TDE cluster is created, ALTER CLUSTER ENCRYPTION KEY ROTATION is automatically invoked to create a key.

DEKs and CEKs are stored in the system catalog PG_TDE. Each time the key is rotated, UPDATE is performed on each row of the system catalog.

Precautions

Only the user who has the database owner permission can execute the function.

Syntax

1

ALTER CLUSTER ENCRYPTION KEY ROTATION;