To manage a database, you can either use an existing instance or add a new instance.
Before You Begin
- Configure the permissions to access AWS resources. Download the amazon_rds_dumpbased_backup_restore_permissions.json file and use it on the AWS command line to apply all the permissions.
Procedure
-
From the navigation pane, go to Protect > Databases.
The Overview page appears.
-
Click Add instance, and then select Cloud database service.
The Add Cloud DB instance dialog box appears.
-
Select Amazon Web Services and then click NEXT.
The Configure Amazon Database dialog box appears.
-
Select RDS (Export) and click NEXT.
The Configure Amazon Database - RDS (Export) page appears.
-
Select Aurora PostgreSQL and click NEXT.
The Configure Amazon database - RDS (Export) - Aurora PostgreSQL page appears.
-
In the Plan section, select a backup plan to use for the instance, and then click Next.
The Cloud Account page appears.
-
From the Cloud account list, select an existing cloud account or add a new cloud account. To add a new cloud account, do the following:
Steps to add new cloud account:
-
Beside the Cloud account list, click +.
The Add cloud account dialog box appears.
-
In the Name box, type the name for the account.
-
In the Regional endpoints box, type the region where the Amazon RDS instance is located.
-
Select the one of the following as per the requirement:
-
IAM role for Amazon EC2
-
AWS STS AssumeRole
-
Access keys for IAM users
-
-
Select an existing credential or add a new credential.
Steps to add a new credential
-
Click the + icon beside the Credentials list.
The Add Credential dialog box appears.
-
Credential Vault: Select the credential vault from the list.
-
Credential name: Enter a name for the credential.
-
Role ARN: Enter to configuring Amazon S3 cloud storage with STS Assume Role or IAM Role Policy authentication.
-
External ID: Enter an external PostgreSQL ID.
-
Description: Enter a description of the credential.
-
Click Save.
-
-
From the Access node list, select an access node.
-
Click Save.
-
-
Click Next.
The Backup Content page appears.
-
Instance name: Select instances based on their names.
-
Under the Connection details section, enter the following details:
-
From the Credential list, select a saved credential or add a new credential.
Steps to add a new credential
-
Click the + icon beside the Credentials list.
The Add Credential dialog box appears.
-
From Account type list, select a database account.
-
From the Database credential type, select a database.
-
From the Credential Vault list, select a credential vault to store credentials for different types of accounts.
-
In the Credential name box, enter a name for the credential.
-
In the Username box, enter the user name to access the Database application.
-
In the Password box, enter the password to access the Database application.
-
Under the Azure AD/AWS IAM/GCP IAM Authentication section, enter the following details:
-
In the Username box, enter the user name to access the Azure Database for PostgreSQL application.
-
In the Password box, enter the password to access the Azure Database for PostgreSQL application.
Note
If you move the Azure AD/AWS IAM Authentication toggle to right, you only need to enter the user name detail.
-
-
The SSL certificate toggle key is unselected by default. By moving the toggle key to right, you can perform the following actions:
-
In the SSL CA file field, provide the SSL CA file path on the proxy computer.
-
In the SSL Cert file field, provide the SSL certificate file path on the proxy computer.
-
In the SSL Key file field, provide the SSL key file path on the proxy computer.
-
-
In the Description box, enter the details of the credential.
-
Click Save.
-
-
In the Maintenance DB box, enter a PostgreSQL maintenance database.
-
In the Endpoint box, type the name of the endpoint to connect to the database instance.
-
-
Click Next.
-
To filter the content that is backed up, click Edit, select or clear the tables, and then click Save.
The Summary page appears.
-
Review the summary, and then click Finish.
Results
-
The new instance contains a dump-based backup set and a default subclient.
-
When you add an instance, a default database group is automatically created. The default database group includes all the data in the PostgreSQL database. You cannot delete the default database group.