Amazon RDS

​

What is this integration?

​

What Monk manages

• DB instance, subnet group, security group

​

What the Agent can do and how to use it

• Database Creation: Provision MySQL, PostgreSQL, MariaDB, Oracle, and SQL Server instances
• Backup & Recovery: Configure automated backups, point-in-time recovery, and manual snapshots
• Scaling: Modify instance types, storage, and enable read replicas for scaling
• High Availability: Set up Multi-AZ deployments for automatic failover
• Security: Configure VPC isolation, security groups, and encryption at rest
• Maintenance: Schedule and manage automated maintenance windows
• Monitoring: Enable Enhanced Monitoring and Performance Insights
• Parameter Groups: Customize database engine parameters and configurations

1. Ensure AWS provider is added: monk cluster provider add -p aws
2. monk update <namespace>/<name>

​

Obtaining AWS Credentials

​

What You’ll Need

• AWS Access Key ID
• AWS Secret Access Key
• Optional: Default region (e.g., us-east-1)

​

Step-by-Step

1. Log into AWS Console at https://console.aws.amazon.com
2. Navigate to IAM → Users
3. Select your IAM user or Create user for Monk
4. Go to Security credentials tab
5. Click Create access key
6. Choose use case: “Third-party service”
7. Click Next → Create access key
8. Copy Access Key ID and Secret Access Key
9. Save them securely - secret key shown only once

​

Required IAM Permissions

• AmazonRDSFullAccess - For RDS management
• AmazonEC2FullAccess - For VPC and security groups
• IAMReadOnlyAccess - For verification

​

Providing to Monk

deploy to AWS with RDS for PostgreSQL

use AWS RDS MySQL database

​

Security Best Practices

​

Auth

• Uses AWS provider credentials (Access Key ID and Secret Access Key)

​

Getting Started

1. Provide AWS credentials to Monk when deploying:

deploy with AWS RDS

​

CLI Reference (Advanced)

monk cluster provider add -p aws

2. Define an RDS instance (save as rds.yaml):

namespace: my-app

my-mysql-db:
  defines: aws-rds/rds-instance
  region: us-east-1
  db_instance_identifier: my-mysql-instance
  db_instance_class: db.t3.micro
  engine: mysql
  master_username: admin
  password_secret_ref: my-mysql-db-password

3. Create/update:

monk update my-app/my-mysql-db
monk describe my-app/my-mysql-db

​

Backup & Snapshot Actions

# View backup configuration
monk do my-app/my-mysql-db/get-backup-info

# Create a snapshot before maintenance
monk do my-app/my-mysql-db/create-snapshot snapshot_id="pre-upgrade"

# List available snapshots
monk do my-app/my-mysql-db/list-snapshots

# Restore to a new instance
monk do my-app/my-mysql-db/restore snapshot_id="pre-upgrade" target_id="restored-db"

# Check status of restored instance
monk do my-app/my-mysql-db/get-restore-status instance_id="restored-db"