rds-proxy
clowdhaus/rds-proxy/aws
Terraform module to create AWS RDS Proxy resources 🇺🇦
AWS RDS Proxy Terraform module Terraform module which creates an AWS RDS Proxy and its supporting resources. Usage See examples directory for working examples to reference: ``hcl module "rds_proxy" { source = "terraform-aws-modules/rds-proxy/aws" name = "rds-proxy" iam_role_name = "rds-proxy-role" vpc_subnet_ids = ["subnet-30ef7b3c", "subnet-1ecda77b", "subnet-ca09ddbc"] vpc_security_group_ids = ["sg-f1d03a88"] endpoints = { read_write = { name = "read-write-endpoint" vpc_subnet_ids = ["subnet-30ef7b3c", "subnet-1ecda77b", "subnet-ca09ddbc"] vpc_security_group_ids = ["sg-f1d03a88"] }, read_only = { name = "read-only-endpoint" vpc_subnet_ids = ["subnet-30ef7b3c", "subnet-1ecda77b", "subnet-ca09ddbc"] vpc_security_group_ids = ["sg-f1d03a88"] target_role = "READ_ONLY" } } auth = { "superuser"
| Name | Type | Description | Default |
|---|---|---|---|
| kms_key_arns | list(string) | List of KMS Key ARNs to allow access to decrypt SecretsManager secrets | [] |
| max_idle_connections_percent | number | Controls how actively the proxy closes idle database connections in the connecti | 50 |
| target_db_cluster | bool | Determines whether DB cluster is targeted by proxy | false |
| manage_log_group | bool | Determines whether Terraform will create/manage the CloudWatch log group or not. | true |
| log_group_tags | map(string) | A map of tags to apply to the CloudWatch log group | {} |
| max_connections_percent | number | The maximum size of the connection pool for each target in a target group | 90 |
| create_iam_policy | bool | Determines whether an IAM policy is created | true |
| endpoints | any | Map of DB proxy endpoints to create and their attributes (see `aws_db_proxy_endp | {} |
| log_group_retention_in_days | number | Specifies the number of days you want to retain log events in the log group | 30 |
| create_iam_role | bool | Determines whether an IAM role is created | true |
| vpc_subnet_ids | list(string) | One or more VPC subnet IDs to associate with the new proxy | [] |
| init_query | string | One or more SQL statements for the proxy to run when opening each new database c | "" |
| tags | map(string) | A map of tags to add to all resources | {} |
| engine_family | string | The kind of database engine that the proxy will connect to. Valid values are `MY | "" |
| idle_client_timeout | number | The number of seconds that a connection to the proxy can be inactive before the | 1800 |
| name | string | The identifier for the proxy. This name must be unique for all proxies owned by | "" |
| connection_borrow_timeout | number | The number of seconds for a proxy to wait for a connection to become available i | null |
| session_pinning_filters | list(string) | Each item in the list represents a class of SQL operations that normally cause a | [] |
| target_db_instance | bool | Determines whether DB instance is targeted by proxy | false |
| db_cluster_identifier | string | DB cluster identifier | "" |
proxy_id — The ID for the proxyproxy_arn — The Amazon Resource Name (ARN) for the proxyproxy_target_id — Identifier of `db_proxy_name`, `target_group_name`, target type (e.g. `RDS_INSTANCE` or `TRACKED_CLUproxy_target_port — Port for the target RDS DB Instance or Aurora DB Clusterproxy_target_target_arn — Amazon Resource Name (ARN) for the DB instance or DB cluster. Currently not returned by the RDS APIproxy_target_tracked_cluster_id — DB Cluster identifier for the DB Instance target. Not returned unless manually importing an RDS_INSTdb_proxy_endpoints — Array containing the full resource object and attributes for all DB proxy endpoints createdproxy_target_rds_resource_id — Identifier representing the DB Instance or DB Cluster targetlog_group_arn — The Amazon Resource Name (ARN) of the CloudWatch log groupiam_role_arn — The Amazon Resource Name (ARN) of the IAM role that the proxy uses to access secrets in AWS Secrets proxy_default_target_group_arn — The Amazon Resource Name (ARN) for the default target groupproxy_default_target_group_name — The name of the default target groupproxy_target_endpoint — Hostname for the target RDS DB Instance. Only returned for `RDS_INSTANCE` typelog_group_name — The name of the CloudWatch log groupiam_role_name — IAM role nameproxy_endpoint — The endpoint that you can use to connect to the proxyproxy_default_target_group_id — The ID for the default target groupproxy_target_type — Type of target. e.g. `RDS_INSTANCE` or `TRACKED_CLUSTER`iam_role_unique_id — Stable and unique string identifying the IAM roleTerraform module to deploy landing zone subscriptions (and much more) in Azure
Terraform Azure Verified Pattern Module for Azure Landing Zone
Terraform Azure Verified Resource Module for Key Vault
Terraform module for building and deploying Next.js apps to AWS. Supports SSR (L