Account permissions required for RDS Administration

1

Hi

Do I need the RDS master password or special permission to administer an RDS oracle instance or not? Can I do it using another read only IAM console account?

Thanks,

1回答
1
承認された回答

Use an IAM user to change the RDS configuration from the management console.
The RDS Admin user is used to make changes within the database, such as creating tables.

In other words, the user you use will change depending on the operation you perform.

profile picture
エキスパート
回答済み 10ヶ月前
profile picture
エキスパート
レビュー済み 10ヶ月前
  • I think RDS administrator includes monitoring, performance tuning, backups, etc. Can all of these admin tasks be done using regular IAM account?

  • If an IAM policy that allows RDS operations is set, it is possible to perform those operations. CloudWatch's IAM policy is required for monitoring, but this can also be operated by an IAM user. For RDS administrators, I recommend creating an IAM user with an IAM policy called AmazonRDSFullAccess. https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AmazonRDSFullAccess.html

  • You can authenticate to the database directly if setup to use IAM authentication but as Riku says an IAM user can administer the RDS instance form the GUI so long as they have the appropriate permissions.

    The master username and password is the admin user for the server instance which allows you to manage tables database users etc.

ログインしていません。 ログイン 回答を投稿する。

優れた回答とは、質問に明確に答え、建設的なフィードバックを提供し、質問者の専門分野におけるスキルの向上を促すものです。

質問に答えるためのガイドライン

関連するコンテンツ