Aurora Global Database
Going Global Locks In More Than Topology: Version Lockstep and the Features That Turn Off
- Managed switchover/failover requires same major+minor versions; Aurora MySQL requires identical patch levels too (no minor version exempts).
- Automatic minor version upgrade has no effect on global-database clusters.
- Unsupported once global: Backtrack, Secrets Manager, secondary Auto Scaling, per-cluster stop/start, member-cluster rename.
- Up to 10 secondary Regions; primary reader budget drops to 15 − s.
Production premise
Attaching a second Region converts your Aurora cluster from an independent unit into a member of a global cluster — and the global cluster becomes the unit of operation. Engine versions must stay in lockstep: managed cross-region switchovers and failovers require the same major and minor versions, and for Aurora MySQL no minor version tolerates differing patch levels at all. Automatic minor version upgrades silently stop applying — the setting exists but has no effect. A list of single-region features turn off at the boundary: Backtracking, Secrets Manager integration, Aurora Auto Scaling on secondary clusters, per-cluster stop/start, and renaming member clusters.
Failure mode & inflection point
The trap isn't a failed attach — it's month six. An emergency cross-region failover is needed, patch levels have drifted because auto minor upgrades were a no-op and nobody ran coordinated patching, so the managed failover path is unavailable and the manual path (detach to standalone, then rebuild the topology region by region) becomes the incident plan. Or a team carries single-region operational assumptions into the global world — "we can Backtrack the bad UPDATE" — and discovers the option no longer exists.
Production guardrail
Run the give-up list as a pre-attach checklist: if Backtrack, Secrets Manager integration, secondary auto-scaling, or per-cluster stop/start is load-bearing, stay single-region until it isn't. Enter global only at an engine version every target Region supports, and treat "all clusters on the identical version, including patch level" as a standing invariant with a monthly check — for MySQL, managed failover depends on it.