Adding an Amazon Aurora MySQL Instance

To manage a database, you can either use an existing instance or add a new instance.

Before You Begin

Configure the permissions to access AWS resources. Download the amazon_rds_dumpbased_backup_restore_permissions.json file and use it on the AWS command line to apply all the permissions.

Procedure

1. From the Command Center navigation pane, go to Protect > Databases.

   The Overview page appears.

2. In the upper-right area of the page, click Add instance, and then click Cloud database service.

   The Add Cloud DB instance page appears.

3. Select Amazon Web Services, and then click Next.

   The Select A Database Service page appears.

4. Select RDS (Export), and then click Next.

   The Select Database page appears.

5. Select Aurora MySQL, and then click Next.

   The Configure permissions pages appears.

6. Select Use hosted infrastructure or Use your access nodes for backups as per requirement.

7. If you select Use hosted infrastructure, do the following:

   1. Click Launch the CloudFormation Stack to launch the CloudFormation stack that creates CommvaultTenantRole in your account. If it already exists in your account, you can skip this step.

   2. From the Credential list, select an existing credential or add a new one. To add a credential, do the following:

   Steps to create credential

   1. Click +.

      The Add credential dialog box appears.

   2. From the Credential Vault, select a credential vault.

   3. In the Credential name box, Enter a name for the credentials that you are creating.

   4. In the Role ARN box, enter the full IAM role Amazon Resource Name (ARN) of the account.

   5. In the External ID box, enter the external ID for the tenant.

   6. In the Description box, enter a description of the credentials.

   7. Click Save.

8. If you select Use your access nodes for backups, do the following:

   1. From the Authentication method, select one of the following authentication methods:

      • AWS STS AssumeRole (recommended)

      • IAM Role

      • Access keys for IAM users (not recommended)

   Note

   If you select IAM Role, the CloudFormation template will create IAM policies for all supported data sources and attach them to a new IAM Role called CommvaultRole by default.

   1. Click Launch the CloudFormation Stack to launch the CloudFormation stack that creates CommvaultTenantRole in your account. If it already exists in your account, you can skip this step.

   2. From the Credential list, select an existing credential or add a new one. To add a credential, do the following:

   Steps to create credential

   1. Click +.

      The Add credential dialog box appears.

   2. From the Credential Vault, select a credential vault.

   3. In the Credential name box, Enter a name for the credentials that you are creating.

   4. In the Role ARN box, enter the full IAM role Amazon Resource Name (ARN) of the account.

   5. In the External ID box, enter the external ID for the tenant.

   6. In the Description box, enter a description of the credentials.

   7. Click Save.

9. Click Next.

   The Configure access nodes section appears.

10. Make the following selections:

    1. If you select Launch the CloudFormation Stack, from the Region list, select the region to store backups.

    2. If you select Use your access nodes for backups, from the Access nodes list, select an access node or access node group.

11. Click Next.

    The Plan page appears.

12. Select an existing plan or add a new plan add a plan.

13. Click Next.

    The Cloud account page appears.

14. From the Cloud account list, select an existing cloud account. To add a new cloud account, do the following:

    1. Click +.

       The Add cloud account dialog box appears.

    2. In the Name box, enter the cloud account name.

    3. Click Save.

15. Click Next.

    The Backup content page appears.

16. From the Instance name list, select an instance.

17. Under the Connection details section, enter the following details:

    • From the Credential list, select a saved credential or add a new credential. To add a new credential, do the following:

      Steps to create credential

      1. Click +.

         The Add Credential dialog box appears.

      2. From Account type list, select a database account.

      3. From the Database credential type, select a database.

      4. From the Credential Vault list, select a credential vault to store credentials for different types of accounts.

      5. In the Credential name box, enter a name for the credential.

      6. In the Username box, enter the user name to access the cloud database for MySQL application.

      7. In the Password box, enter the password to access the cloud database for MySQL application.

      8. The SSL certificate toggle key is unselected by default. By moving this toggle key to the right, you can perform the following actions:

         • In the SSL CA file field, provide the SSL CA file path on the proxy computer.

         • In the SSL Cert file field, provide the SSL certificate file path on the proxy computer.

         • In the SSL Key file field, provide the SSL key file path on the proxy computer.

      9. In the Description box, enter the details of the credential.

      10. Click Save.

    • To specify the endpoint, in the Endpoint box, enter the name of the endpoint to connect to the database instance.

    The endpoint value is automatically discovered and displayed, based on the instance you previously selected. By default, the discovered endpoint is the cluster endpoint and is used for both read-only access (backups) and write access (restores). For more information, refer to the Amazon Aurora endpoint connections documentation.

    Note

    For Multi-AZ DB cluster, enter the endpoint name of the cluster with writer access.

18. Click Next.

    A summary page is displayed to show the instance information.

19. Click Finish.

Results

The new instance contains a default database group. The default database group includes all the data in the Amazon Aurora MySQL database. You cannot delete the default database group.