Secure Features Support

Policy Checks

Redshift works with all Changelog-scoped checks. These automatically analyze your changelogs to ensure the desired format and behavior, increasing deployment success rates and upholding security best practices. Redshift does not work with Database-scoped checks. For example, checks-scope=database.

Secrets Management

Keep your authentication data secure by integrating it with third-party secrets vaults. AWS Secrets Manager, AWS S3, and HashiCorp Vault are verified to be compatible with Liquibase.

Structured Logging

Improve your database observability by easily reading Liquibase data in your favorite analytics tool. Use --log-format=json to enable.

Operation Reports

Generate HTML reports for update, rollback, diff, drift, and check-run operations.

Flow Files

Create repeatable, portable, and platform-independent Liquibase workflows to run in any of your CI/CD tools.

DATABASECHANGELOGHISTORY table (DBCLH)

Record a history of all changes you make to the database, including changes not tracked by the DATABASECHANGELOG table. To enable, pass --dbclhistory-enabled=true and --dbclhistory-capture-extensions=false to the update and dbcl-history commands, or set both in liquibase.properties to enable globally.

Known issue: The drop-all command is not supported when DBCLH is enabled.

Remote file access

Centralize file management with AWS S3 to build a reusable repository of Liquibase files you can update and retrieve.