RDS Security Controls: Aurora PostgreSQL Cluster (w/ Secrets Manager)

My Saved Presets

Configuration template to launch an Aurora cluster with PostgreSQL compatibility with one or more instances. The template also includes a new DB subnet group to specify the subnets for the cluster instances to be created as well as a new AWS Secrets Manager secret to store the password

Settings for customizing the template include:

RDS Settings:
- Engine and Engine Version, DB Instance Type
- (Aurora) Cluster Name and Number of Instances
- (RDS) Allocated Storage and Storage Type
- (RDS) Enable Multi-AZ
- Encryption Storage and Deletion Protection
Create a new DB Subnet Group to specify the Subnet Ids for the RDS Cluster or Instance or reference an existing DB Subnet Group for the RDS Cluster or Instance
(Optional) Database Settings which include Database Name, Port, Username and Password
- Password by default is a random string that is generated and stored in AWS Secrets Manager, edit the secret properties using the Edit Secret Settings
- Optionally provide the password as clear-text (not recommended)
Maintenance and Backup options such as Backup Retention Period, preferred Backup and Maintenance Windows

Items

Size

1.1 KB

YAML/JSON

AWSTemplateFormatVersion: '2010-09-09'
Description: ''
Resources:
  DbSecret:
    Type: 'AWS::SecretsManager::Secret'
    Properties:
      KmsKeyId: alias/aws/secretsmanager
      GenerateSecretString:
        ExcludeLowercase: false
        ExcludeNumbers: false
        ExcludePunctuation: false
        ExcludeUppercase: false
        PasswordLength: 32
        ExcludeCharacters: /"@\
  RdsCluster:
    Type: 'AWS::RDS::DBCluster'
    Properties:
      Engine: aurora-postgresql
      EngineVersion: '13.3'
      DBClusterIdentifier: aurora-postgres-cluster
      DBSubnetGroupName: custom-subnet-group
      MasterUsername: dbadmin
      MasterUserPassword:
        'Fn::Sub': '{{resolve:secretsmanager:${DbSecret}}}'
      Port: '5432'
      StorageEncrypted: false
      BackupRetentionPeriod: 1
      DeletionProtection: false
  RdsClusterInstance1:
    Type: 'AWS::RDS::DBInstance'
    Properties:
      Engine: aurora-postgresql
      DBClusterIdentifier:
        Ref: RdsCluster
      DBInstanceIdentifier: aurora-postgres-clusterInstance1
      DBInstanceClass: db.t3.medium
      DBSubnetGroupName: custom-subnet-group
Parameters: {}
Metadata: {}
Conditions: {}

Engine

Engine Version

DB Instance Class

RDS Cluster Name

Number of instances

Storage Encrypted

Enable Deletion Protection

Database Name

Port

Master Username

Database Password

VPC Security Group Ids

DB Subnet Group Name

Backup Retention Period

Preferred Backup Window

Preferred Maintenance Window

* Required field

Loading Library ...

Aurora PostgreSQL Cluster (w/ Secrets Manager)

Actions

Customize Template

RDS Settings

Database Settings

Network Settings

Maintenance & Backup