To manage a database, you can either use an existing instance or add a new instance.
Before You Begin
- Configure the permissions to access AWS resources. Download the amazon_rds_dumpbased_backup_restore_permissions.json file and use it on the AWS command line to apply all the permissions.
Procedure
-
From the navigation pane, go to Protect > Databases.
The Overview page appears.
-
Click Add instance, and then select Cloud database service.
The Add Cloud DB instance dialog box appears.
-
Select Amazon Web Services and then click NEXT.
The Configure Amazon Database dialog box appears.
-
Select RDS (Export) and click NEXT.
The Configure Amazon Database - RDS (Export) page appears.
-
Select Aurora PostgreSQL and click NEXT.
The Select A Plan page appears.
-
From the list of server plans, select a server plan, and then click NEXT.
The Cloud Account page appears.
-
From the Cloud account list, select an existing cloud account or create a new cloud account.
To configure a new cloud account, complete the following steps:
-
Click +.
The Add cloud account page appears.
-
In the Name box, type the name for the account.
-
In the Regions box, type the region where the Amazon RDS instance is located.
-
Enter the host or account authentication information:
-
IAM role: To authenticate the Amazon RDS cloud account, select this option.
-
STS assume role with IAM policy: To authenticate the Amazon RDS cloud account using a security token service (STS) assume role, select this option, and from the Credentials list, select the credential for the Amazon RDS cloud account.
To apply an IAM policy for the hypervisor when you use this authentication method, you can attach an IAM policy with sts:AssumeRole to the access node in the AWS Console. For more information about STS role authentication, see Configuring STS Role Authentication.
-
Access and secret key: To authenticate the Amazon RDS cloud account using an access key and a secret key, select this option, and from the Credentials list, select the credential for the Amazon RDS cloud account.
-
-
From the Access nodes list, select the access nodes to use for the instance.
-
Click SAVE.
-
-
Click NEXT.
The Backup content page appears.
-
From the Instance name list, select an instance.
-
In the Database user box, type the user name to access the Aurora PostgreSQL application.
-
In the Password box, type the password to access the the Aurora PostgreSQL application.
-
In the Maintenance DB box, type the name of the system database that is used as the maintenance database.
-
To specify the endpoint, in the Endpoint box type the name of the endpoint to connect to the database instance.
The endpoint value is automatically discovered and displayed, based on the instance you previously selected. By default, the discovered endpoint is the cluster endpoint and is used for both read-only access (backups) and write access (restores). For more information, refer to the Amazon Aurora endpoint connections documentation.
Note
For Amazon Aurora Global Database cluster, enter the endpoint name of the global writer.
-
If SSL is enabled on the cloud, move the Use SSL options toggle key to the right, and then in the SSL CA file box, enter the SSL CA file path in the proxy computer.
-
Click NEXT.
A summary page is displayed to show the instance information.
-
Click FINISH.
Results
-
The new instance contains a dump-based backup set and a default subclient.
-
When you add an instance, a default database group is automatically created. The default database group includes all the data in the PostgreSQL database. You cannot delete the default database group.