RDS Security Controls: RDS MariaDB Instance (w/ Secrets Manager)

My Saved Presets

Configuration template to launch an RDS instance running MariaDB. The template also includes a new DB subnet group to specify the subnets for the cluster instances to be created as well as a new AWS Secrets Manager secret to store the password

Settings for customizing the template include:

RDS Settings:
- Engine and Engine Version, DB Instance Type
- (Aurora) Cluster Name and Number of Instances
- (RDS) Allocated Storage and Storage Type
- (RDS) Enable Multi-AZ
- Encryption Storage and Deletion Protection
Create a new DB Subnet Group to specify the Subnet Ids for the RDS Cluster or Instance or reference an existing DB Subnet Group for the RDS Cluster or Instance
(Optional) Database Settings which include Database Name, Port, Username and Password
- Password by default is a random string that is generated and stored in AWS Secrets Manager, edit the secret properties using the Edit Secret Settings
- Optionally provide the password as clear-text (not recommended)
Maintenance and Backup options such as Backup Retention Period, preferred Backup and Maintenance Windows

Items

Size

1.0 KB

YAML/JSON

AWSTemplateFormatVersion: '2010-09-09'
Description: ''
Resources:
  DbSecret:
    Type: 'AWS::SecretsManager::Secret'
    Properties:
      KmsKeyId: alias/aws/secretsmanager
      GenerateSecretString:
        ExcludeLowercase: false
        ExcludeNumbers: false
        ExcludePunctuation: false
        ExcludeUppercase: false
        PasswordLength: 32
        ExcludeCharacters: /"@\
  RdsInstance:
    Type: 'AWS::RDS::DBInstance'
    Properties:
      DBInstanceClass: db.t3.medium
      MultiAZ: false
      Engine: mariadb
      EngineVersion: 10.5.12
      DBSubnetGroupName: custom-subnet-group
      MasterUsername: dbadmin
      MasterUserPassword:
        'Fn::Sub': '{{resolve:secretsmanager:${DbSecret}}}'
      Port: '3306'
      DBInstanceIdentifier: rds-mariadb
      AllocatedStorage: '50'
      StorageEncrypted: false
      StorageType: standard
      BackupRetentionPeriod: 1
      DeleteAutomatedBackups: true
      DeletionProtection: false
Parameters: {}
Metadata: {}
Conditions: {}

Engine

Engine Version

DB Instance Class

RDS Instance Name

Allocated Storage (GB)

Storage Type

Multi AZ

Delete Automated Backups

Storage Encrypted

Enable Deletion Protection

Database Name

Port

Master Username

Database Password

VPC Security Group Ids

DB Subnet Group Name

Backup Retention Period

Preferred Backup Window

Preferred Maintenance Window

* Required field

Loading Library ...

RDS MariaDB Instance (w/ Secrets Manager)

Actions

Customize Template

RDS Settings

Database Settings

Network Settings

Maintenance & Backup