db_instance#

State operations for RDS db_instance

async idem_aws.states.aws.rds.db_instance.present(hub, ctx, name: str, db_instance_class: str, engine: str, resource_id: str = None, db_name: str = None, allocated_storage: int = None, master_username: str = None, master_user_password: str = None, db_security_groups: List[str] = None, vpc_security_group_ids: List[str] = None, availability_zone: str = None, db_subnet_group_name: str = None, preferred_maintenance_window: str = None, db_parameter_group_name: str = None, backup_retention_period: int = None, preferred_backup_window: str = None, port: int = None, multi_az: bool = None, engine_version: str = None, auto_minor_version_upgrade: bool = None, license_model: str = None, iops: int = None, option_group_name: str = None, character_set_name: str = None, nchar_character_set_name: str = None, publicly_accessible: bool = None, tags: Dict[str, Any] = None, db_cluster_identifier: str = None, storage_type: str = None, tde_credential_arn: str = None, tde_credential_password: str = None, storage_encrypted: bool = None, kms_key_id: str = None, domain: str = None, copy_tags_to_snapshot: bool = None, monitoring_interval: int = None, monitoring_role_arn: str = None, domain_iam_role_name: str = None, promotion_tier: int = None, timezone: str = None, enable_iam_database_authentication: bool = None, enable_performance_insights: bool = None, performance_insights_kms_key_id: str = None, performance_insights_retention_period: int = None, enable_cloudwatch_logs_exports: List[str] = None, processor_features: List[ProcessorFeatureList] = None, deletion_protection: bool = None, max_allocated_storage: int = None, enable_customer_owned_ip: bool = None, custom_iam_instance_profile: str = None, backup_target: str = None, apply_immediately: bool = None, allow_major_version_upgrades: bool = None, ca_certificate_identifier: str = None, cloudwatch_logs_export_configuration: Dict = None, use_default_processor_features: bool = None, certificate_rotation_restart: bool = None, replica_mode: str = None, aws_backup_recovery_point_arn: str = None, automation_mode: str = None, resume_full_automation_mode_minutes: int = None, domain_auth_secret_arn: str = None, manage_master_user_password: bool = None, master_user_secret_kms_key_id: str = None, timeout: Timeout = None) → Dict[str, Any][source]#

Creates a new DB instance.

Parameters:

  • name (str) – Idem name to identify the resource

  • allocated_storage (int) – The amount of storage in gibibytes (GiB) to allocate for the DB instance

  • db_instance_class (str) – The compute and memory capacity of the DB instance, for example db.m4.large

  • engine (str) – The name of the database engine to be used for this instance

  • resource_id (str, Optional) – AWS Id of the resource

  • db_name (str, Optional) – Name of the database

  • master_username (str, Optional) – The name for the master user.Not required for aurora

  • master_user_password (str, Optional) – The password for the master user. The password can include any printable ASCII character except “/”, “””, or “@”. Not required for aurora

  • db_security_groups (list, Optional) – A list of DB security groups to associate with this DB instance

  • vpc_security_group_ids (list, Optional) – A list of DB security groups to associate with this DB instance

  • availability_zone (str, Optional) – The Availability Zone (AZ) where the database will be created

  • db_subnet_group_name (str, Optional) – A DB subnet group to associate with this DB instance

  • preferred_maintenance_window (str, Optional) – The time range each week during which system maintenance can occur, in Universal Coordinated Time (UTC)

  • db_parameter_group_name (str, Optional) – The name of the DB parameter group to associate with this DB instance. If you do not specify a value, then the default DB parameter group for the specified DB engine and version is used.

  • backup_retention_period (int, Optional) – The number of days for which automated backups are retained. Setting this parameter to a positive number enables backups. Setting this parameter to 0 disables automated backups.

  • preferred_backup_window (str, Optional) – The daily time range during which automated backups are created if automated backups are enabled,using the BackupRetentionPeriod parameter.

  • port (int, Optional) – The port number on which the database accepts connections.

  • multi_az (bool, Optional) – A value that indicates whether the DB instance is a Multi-AZ deployment. You can’t set the AvailabilityZone parameter if the DB instance is a Multi-AZ deployment.

  • engine_version (str, Optional) – The version number of the database engine to use.

  • auto_minor_version_upgrade (bool, Optional) – A value that indicates whether minor engine upgrades are applied automatically to the DB instance during the maintenance window. By default, minor engine upgrades are applied automatically.

  • license_model (str, Optional) – License model information for this DB instance.

  • iops (int, Optional) – The amount of Provisioned IOPS (input/output operations per second) to be initially allocated for the DB instance.

  • option_group_name (str, Optional) – A value that indicates that the DB instance should be associated with the specified option group.

  • character_set_name (str, Optional) – For supported engines, this value indicates that the DB instance should be associated with the specified CharacterSet.

  • nchar_character_set_name (str, Optional) – The name of the NCHAR character set for the Oracle DB instance.

  • publicly_accessible (bool, Optional) – A value that indicates whether the DB instance is publicly accessible.

  • tags (Dict or List, Optional) –

    Dict in the format of {tag-key: tag-value} or List of tags in the format of [{"Key": tag-key, "Value": tag-value}] to associate with the DB instance. Each tag consists of a key name and an associated value. Defaults to None.

    • Key (str, Optional): The key of the tag. Constraints: Tag keys are case-sensitive and accept a maximum of 127 Unicode characters. May not begin with aws:.

    • Value(str, Optional): The value of the tag. Constraints: Tag values are case-sensitive and accept a maximum of 256 Unicode characters.

  • db_cluster_identifier (str, Optional) – The identifier of the DB cluster that the instance will belong to.

  • storage_type (str, Optional) – Specifies the storage type to be associated with the DB instance.

  • tde_credential_arn (str, Optional) – The ARN from the key store with which to associate the instance for TDE encryption.

  • tde_credential_password (str, Optional) – The password for the given ARN from the key store in order to access the device.

  • storage_encrypted (bool, Optional) – A value that indicates whether the DB instance is encrypted. By default, it isn’t encrypted

  • kms_key_id (str, Optional) – The Amazon Web Services KMS key identifier for an encrypted DB instance.

  • domain (str, Optional) – The Active Directory, directory ID to create the DB instance in

  • copy_tags_to_snapshot (str, Optional) – A value that indicates whether to copy tags from the DB instance to snapshots of the DB instance. By default, tags are not copied.

  • monitoring_interval (int, Optional) – The interval, in seconds, between points when Enhanced Monitoring metrics are collected for the DB instance.To disable collection of Enhanced Monitoring metrics, specify 0. The default is 0. If MonitoringRoleArn is specified, then you must set MonitoringInterval to a value other than 0.

  • monitoring_role_arn (str, Optional) – The ARN for the IAM role that permits RDS to send enhanced monitoring metrics to Amazon CloudWatch Logs.

  • domain_iam_role_name (str, Optional) – Specify the name of the IAM role to be used when making API calls to the Directory Service.

  • promotion_tier (int, Optional) – A value that specifies the order in which an Aurora Replica is promoted to the primary instance after a failure of the existing primary instance.

  • timezone (str, Optional) – The time zone of the DB instance.

  • enable_iam_database_authentication (bool, Optional) – A value that indicates whether to enable mapping of Amazon Web Services Identity and Access Management (IAM) accounts to database accounts. By default, mapping isn’t enabled.

  • enable_performance_insights (bool, Optional) – A value that indicates whether to enable Performance Insights for the DB instance.

  • performance_insights_kms_key_id (str, Optional) – The Amazon Web Services KMS key identifier for encryption of Performance Insights data.

  • performance_insights_retention_period (int, Optional) – The amount of time, in days, to retain Performance Insights data.

  • enable_cloudwatch_logs_exports (List, Optional) – The list of log types that need to be enabled for exporting to CloudWatch Logs. The values in the list depend on the DB engine.

  • processor_features (List[Dict[str, Any]], Optional) –

    The number of CPU cores and the number of threads per core for the DB instance class of the DB instance. This setting doesn’t apply to RDS Custom. Defaults to None.

    • Name (str, Optional): The name of the processor feature. Valid names are coreCount and threadsPerCore.

    • Value (str, Optional): The value of a processor feature name.

  • deletion_protection (bool, Optional) – A value that indicates whether the DB instance has deletion protection enabled. The database can’t be deleted when deletion protection is enabled. By default, deletion protection isn’t enabled.

  • max_allocated_storage (int, Optional) – The upper limit in gigabytes (GiB) to which Amazon RDS can automatically scale the storage of the DB instance.

  • enable_customer_owned_ip (bool, Optional) – A value that indicates whether to enable a customer-owned IP address (CoIP) for an RDS on Outposts DB instance.

  • custom_iam_instance_profile (str, Optional) – The instance profile associated with the underlying Amazon EC2 instance of an RDS Custom DB instance.

  • backup_target (str, Optional) – Value to specify where automated backups and manual snapshots are stored.

  • apply_immediately (bool, Optional) – A value that indicates whether the modifications in this request and any pending modifications are asynchronously applied as soon as possible, regardless of the PreferredMaintenanceWindow setting for the DB instance. By default, this parameter is disabled.

  • allow_major_version_upgrades (bool, Optional) – A value that indicates whether major version upgrades are allowed. Changing this parameter doesn’t result in an outage and the change is asynchronously applied as soon as possible.

  • cloudwatch_logs_export_configuration (Dict, Optional) – The configuration setting for the log types to be enabled for export to CloudWatch Logs for a specific DB instance.

  • ca_certificate_identifier (str, Optional) – The identifier of the CA certificate for the DB instance.

  • use_default_processor_features (bool, Optional) – A value that indicates whether the DB instance class of the DB instance uses its default processor features.

  • certificate_rotation_restart (bool, Optional) – A value that indicates whether the DB instance is restarted when you rotate your SSL/TLS certificate.

  • replica_mode (str, Optional) – A value that sets the open mode of a replica database to either mounted or read-only

  • aws_backup_recovery_point_arn (str, Optional) – The Amazon Resource Name (ARN) of the recovery point in Amazon Web Services Backup.

  • automation_mode (str, Optional) – The automation mode of the RDS Custom DB instance: full or all paused.

  • resume_full_automation_mode_minutes (int, Optional) – The number of minutes to pause the automation. When the time period ends, RDS Custom resumes full automation

  • domain_auth_secret_arn (str, Optional) – The ARN for the Secrets Manager secret that contains the credentials for the user performing the domain join. Example: arn:aws:secretsmanager:region:account-number:secret:myselfmanagedADtestsecret-123456. Defaults to None.

  • manage_master_user_password (bool, Optional) – Specifies whether to manage the master user password with Amazon Web Services Secrets Manager. For more information, see Password management with Amazon Web Services Secrets Manager in the Amazon RDS User Guide. Constraints: Can’t manage the master user password with Amazon Web Services Secrets Manager if MasterUserPassword is specified. Defaults to None.

  • master_user_secret_kms_key_id (str, Optional) – The Amazon Web Services KMS key identifier to encrypt a secret that is automatically generated and managed in Amazon Web Services Secrets Manager. This setting is valid only if the master user password is managed by RDS in Amazon Web Services Secrets Manager for the DB instance. The Amazon Web Services KMS key identifier is the key ARN, key ID, alias ARN, or alias name for the KMS key. To use a KMS key in a different Amazon Web Services account, specify the key ARN or alias ARN. If you don’t specify MasterUserSecretKmsKeyId, then the aws/secretsmanager KMS key is used to encrypt the secret. If the secret is in a different Amazon Web Services account, then you can’t use the aws/secretsmanager KMS key to encrypt the secret, and you must use a customer managed KMS key. There is a default KMS key for your Amazon Web Services account. Your Amazon Web Services account has a different default KMS key for each Amazon Web Services Region. Defaults to None.

  • timeout (Dict, Optional) –

    Timeout configuration for create/update of AWS DB Cluster.

    • create (Dict) – Timeout configuration for creating DB Instance * delay(int) – The amount of time in seconds to wait between attempts.Defaults to 30 * max_attempts(int) – Customized timeout configuration containing delay and max attempts.Defaults to 60

    • update (Dict) – Timeout configuration for updating DB Instance * delay(int) – The amount of time in seconds to wait between attempts.Defaults to 30 * max_attempts(int) – Customized timeout configuration containing delay and max attempts.Defaults to 60

Request Syntax:
[db-instance-name]:
  aws.rds.db_instance.present:
    - db_instance_class: 'string'
    - engine: 'string'
    - resource_id: 'string'
    - availability_zone: 'string'
    - preferred_maintenance_window: 'string'
    - multi_az: 'bool'
    - engine_version: 'string'
    - auto_minor_version_upgrade: 'bool'
    - license_model: 'string'
    - publicly_accessible: 'bool'
    - db_cluster_identifier: 'string'
    - storage_type: 'string'
    - storage_encrypted: 'bool'
    - copy_tags_to_snapshot: 'bool'
    - monitoring_interval: 'int'
    - monitoring_role_arn: 'string'
    - promotion_tier: 'int'
    - enable_performance_insights: 'bool'
    - performance_insights_kms_key_id: 'string'
    - performance_insights_retention_period: 'int'
    - backup_target: 'string'
    - vpc_security_group_id: 'List'
    - db_subnet_group_name: 'string'
    - db_parameter_group_name: 'string'
    - option_group_name: 'string'
    - tags: 'List'
    - timeout: 'Dict'
Returns:

Dict[str, Any]

Examples

instance-1:
  aws.rds.db_instance.present:
  - db_instance_class: db.r5.large
  - engine: aurora-postgresql
  - availability_zone: us-east-2b
  - preferred_maintenance_window: sat:04:15-sat:04:45
  - multi_az: false
  - engine_version: '12.7'
  - auto_minor_version_upgrade: true
  - license_model: postgresql-license
  - publicly_accessible: false
  - db_cluster_identifier: db-cluster-1
  - storage_type: aurora
  - storage_encrypted: true
  - copy_tags_to_snapshot: false
  - monitoring_interval: 60
  - monitoring_role_arn: arn:aws:iam::537227425989:role/rds-monitoring-role
  - promotion_tier: 1
  - enable_performance_insights: true
  - performance_insights_kms_key_id: arn:aws:kms:us-east-2:537227425989:key/e9e79921-8dda-48d7-afd7-38a64dd8e9b1
  - performance_insights_retention_period: 7
  - backup_target: region
  - vpc_security_group_id:
    - sg-f5eeba9c
  - db_subnet_group_name: default
  - db_parameter_group_name: default.aurora-postgresql12
  - option_group_name: default:aurora-postgresql-12
  - tags:
    - Key: name
      Value: value
  - timeout:
      create:
        delay: 10
        max_attempts: 30
async idem_aws.states.aws.rds.db_instance.absent(hub, ctx, name: str, resource_id: str = None, skip_final_snapshot: bool = False, final_db_snapshot_identifier: str = None, timeout: Dict = None) → Dict[str, Any][source]#

The DeleteDBInstance action deletes a previously provisioned DB instance. When you delete a DB instance, all automated backups for that instance are deleted and can’t be recovered. Manual DB snapshots of the DB instance to be deleted by DeleteDBInstance are not deleted. If you request a final DB snapshot the status of the Amazon RDS DB instance is deleting until the DB snapshot is created. The API action DescribeDBInstance is used to monitor the status of this operation. The action can’t be canceled or reverted once submitted. When a DB instance is in a failure state and has a status of failed, incompatible-restore, or incompatible-network, you can only delete it when you skip creation of the final snapshot with the SkipFinalSnapshot parameter. If the specified DB instance is part of an Amazon Aurora DB cluster, you can’t delete the DB instance if both of the following conditions are true: The DB cluster is a read replica of another Amazon Aurora DB cluster. The DB instance is the only instance in the DB cluster. To delete a DB instance in this case, first call the PromoteReadReplicaDBCluster API action to promote the DB cluster so it’s no longer a read replica. After the promotion completes, then call the DeleteDBInstance API action to delete the final instance in the DB cluster.

Parameters:

  • name (str) – Idem name to identify the resource.

  • resource_id (str, Optional) – AWS ID to identify the resource.

  • skip_final_snapshot (bool, Optional) – Mention this true if you want to skip creating snapshot default is false.

  • final_db_snapshot_identifier (str, Optional) – Identifier for the created final db_snapshot.

  • timeout (Dict, Optional) –

    Timeout configuration for deletion of AWS DB Instance.

    • delete (Dict) – Timeout configuration for deletion of a DB Instance * delay(int) – The amount of time in seconds to wait between attempts.Defaults to 30 * max_attempts(int) – Customized timeout configuration containing delay and max attempts.Defaults to 60

Returns:

Dict[str, Any]

Examples

test-db-instance:
  aws.rds.db_instance.absent:
    - resource_id: test-db-instance,
    - skip_final_snapshot: true
async idem_aws.states.aws.rds.db_instance.describe(hub, ctx) → Dict[str, Dict[str, Any]][source]#

Describe the resource in a way that can be recreated/managed with the corresponding “present” function

Returns information about provisioned RDS instances. This API supports pagination. This operation can also return information for Amazon Neptune DB instances and Amazon DocumentDB instances.

Returns:

Dict[str, Any]

Examples

$ idem describe aws.rds.db_instance