Adding an Amazon Aurora MySQL Instance

To manage a database, you can either use an existing instance or add a new instance.

Before You Begin

Configure the permissions to access AWS resources. Download the amazon_rds_dumpbased_backup_restore_permissions.json file and use it on the AWS command line to apply all the permissions.

Procedure

1. From the Command Center navigation pane, go to Protect > Databases.

   The Overview page appears.

2. In the upper-right area of the page, click Add instance, and then click Cloud database service.

   The Add Cloud DB instance page appears.

3. Select Amazon Web Services, and then click Next.

   The Select A Database Service page appears.

4. Select RDS (Export), and then click Next.

   The Select Database page appears.

5. Select Aurora MySQL, and then click Next.

   The Configure Amazon database - RDS (Export) - Aurora MySQL page appears.

6. In the Configure permissions section, from the Authentication method list, you can select the following options:

   • AWS STS AssumeRole: To authenticate the Amazon RDS cloud account using a security token service (STS) assume role, select this option, and from the Credentials list, select the credential for the Amazon RDS cloud account.

     To apply an IAM policy for the hypervisor when you use this authentication method, you can attach an IAM policy with sts:AssumeRole to the access node in the AWS Console. For more information about STS role authentication, see Configuring STS Role Authentication.

   • IAM role: To authenticate the Amazon RDS cloud account, select this option.

   • Access keys for IAM users: To authenticate the Amazon RDS cloud account using an access key and a secret key, select this option, and from the Credentials list, select the credential for the Amazon RDS cloud account.

7. In the Configure Credential section, From the Credential list, select a saved credential or add a new credential.

   Steps to add a new credential

   1. Click the + icon beside the Credentials list.

   The Add Credential dialog box appears.

   2. From Account type list, select a database account.

   3. From Vendor type list, select a vendor.

   4. From the Credential Vault list, select a credential vault to store credentials for different types of accounts.

   5. In the Credential name box, enter a name for the credential.

   6. In the Access key ID box, enter the access key ID for authenticating and providing secure access to cloud storage services.

   7. In the Secret access key box, enter the secret key for authenticating cloud storage.

   8. Click Save.

8. Click Next.

9. From the Access nodes list, select an existing access node or add a new access node. To add a new access node, do the following:

10. Click +.

    The Add a new backup gateway dialog box appears.

11. From the Platform list, you can select the following platforms:

    • Windows

    • Linux

12. From the Region list, select a region.

13. Click Ok.

14. In the Plan section, select a backup plan to use for the instance, and then click Next.

    The Cloud Account page appears.

15. From the Cloud account list, select an existing cloud account or add a new cloud account. To add a new cloud account, do the following:

    Steps to add new cloud account:

    1. Beside the Cloud account list, click +.

       The Add cloud account dialog box appears.

    2. In the Name box, type the name for the account.

    3. In the Regional endpoints box, type the region where the Amazon RDS instance is located.

    4. Click Save.

16. Click Next.

    The Backup Content page appears.

17. Instance name: Select instances based on their names.

18. Under the Connection details section, enter the following details:

    1. From the Credential list, select a saved credential or add a new credential.

       Steps to add a new credential

       1. Click the + icon beside the Credentials list.

          The Add Credential dialog box appears.

       2. From Account type list, select a database account.

       3. From the Database credential type, select a database.

       4. From the Credential Vault list, select a credential vault to store credentials for different types of accounts.

       5. In the Credential name box, enter a name for the credential.

       6. In the Username box, enter the user name to access the Database application.

       7. In the Password box, enter the password to access the Database application.

       8. The SSL certificate toggle key is unselected by default. By moving the toggle key to right, you can perform the following actions:

          • In the SSL CA file field, provide the SSL CA file path on the proxy computer.

          • In the SSL Cert file field, provide the SSL certificate file path on the proxy computer.

          • In the SSL Key file field, provide the SSL key file path on the proxy computer.

       9. In the Description box, enter the details of the credential.

       10. Click Save.

    2. In the Endpoint box, type the name of the endpoint to connect to the database instance.

19. Click Next.

20. To filter the content that is backed up, click Edit, select or clear the tables, and then click Save.

    The Summary page appears.

21. Review the summary, and then click Finish.

Results

The new instance contains a default database group. The default database group includes all the data in the Amazon Aurora MySQL database. You cannot delete the default database group.