steampipe plugin install awssteampipe plugin install aws

Table: aws_rds_db_cluster

An Amazon Aurora DB cluster consists of one or more DB instances and a cluster volume that manages the data for those DB instances.

Note: This table only returns RDS DB clusters, e.g., Aurora, MySQL, Postgres, not DocumentDB or Neptune DB clusters.

Examples

List of DB clusters which are not encrypted

select
  db_cluster_identifier,
  allocated_storage,
  kms_key_id
from
  aws_rds_db_cluster
where
  kms_key_id is null;

List of DB clusters where backup retention period is greater than 7 days

select
  db_cluster_identifier,
  backup_retention_period
from
  aws_rds_db_cluster
where
  backup_retention_period > 7;

Avalability zone count for each db instance

select
  db_cluster_identifier,
  jsonb_array_length(availability_zones) availability_zones_count
from
  aws_rds_db_cluster;

DB cluster Members info

select
  db_cluster_identifier,
  member ->> 'DBClusterParameterGroupStatus' as db_cluster_parameter_group_status,
  member ->> 'DBInstanceIdentifier' as db_instance_identifier,
  member ->> 'IsClusterWriter' as is_cluster_writer,
  member ->> 'PromotionTier' as promotion_tier
from
  aws_rds_db_cluster
  cross join jsonb_array_elements(members) as member;

List DB cluster pending maintenance actions

select
  actions ->> 'ResourceIdentifier' as db_cluster_identifier,
  details ->> 'Action' as action,
  details ->> 'OptInStatus' as opt_in_status,
  details ->> 'ForcedApplyDate' as forced_apply_date,
  details ->> 'CurrentApplyDate' as current_apply_date,
  details ->> 'AutoAppliedAfterDate' as auto_applied_after_date
from
  aws_rds_db_cluster,
  jsonb_array_elements(pending_maintenance_actions) as actions,
  jsonb_array_elements(actions -> 'PendingMaintenanceActionDetails') as details;

Query examples

Control examples

.inspect aws_rds_db_cluster

AWS RDS DB Cluster

Name	Type	Description
_ctx	jsonb	Steampipe context in JSON form, e.g. connection_name.
account_id	text	The AWS Account ID in which the resource is located.
activity_stream_kinesis_stream_name	text	The name of the Amazon Kinesis data stream used for the database activity stream.
activity_stream_kms_key_id	text	The AWS KMS key identifier used for encrypting messages in the database activity stream.
activity_stream_mode	text	The mode of the database activity stream.
activity_stream_status	text	The status of the database activity stream.
akas	jsonb	Array of globally unique identifier strings (also known as) for the resource.
allocated_storage	bigint	Specifies the allocated storage size in gibibytes (GiB).
arn	text	The Amazon Resource Name (ARN) for the DB Cluster.
associated_roles	jsonb	A list of AWS IAM roles that are associated with the DB cluster.
availability_zones	jsonb	A list of Availability Zones (AZs) where instances in the DB cluster can be created.
backtrack_consumed_change_records	bigint	The number of change records stored for Backtrack.
backtrack_window	bigint	The target backtrack window, in seconds.
backup_retention_period	bigint	Specifies the number of days for which automatic DB snapshots are retained.
capacity	bigint	The current capacity of an Aurora Serverless DB cluster.
character_set_name	text	Specifies the name of the character set that this cluster is associated with.
clone_group_id	text	Identifies the clone group to which the DB cluster is associated.
copy_tags_to_snapshot	boolean	Specifies whether tags are copied from the DB cluster to snapshots of the DB cluster, or not.
create_time	timestamp with time zone	Specifies the time when the DB cluster was created.
cross_account_clone	boolean	Specifies whether the DB cluster is a clone of a DB cluster owned by a different AWS account, or not.
custom_endpoints	jsonb	A list of all custom endpoints associated with the cluster.
database_name	text	Contains the name of the initial database of this DB cluster that was provided at create time.
db_cluster_identifier	text	The friendly name to identify the DB Cluster.
db_cluster_parameter_group	text	Specifies the name of the DB cluster parameter group for the DB cluster.
db_subnet_group	text	Specifies information on the subnet group associated with the DB cluster.
deletion_protection	boolean	Specifies whether the DB cluster has deletion protection enabled, or not.
domain_memberships	jsonb	A list of Active Directory Domain membership records associated with the DB cluster.
earliest_backtrack_time	timestamp with time zone	The earliest time to which a DB cluster can be backtracked.
earliest_restorable_time	timestamp with time zone	The earliest time to which a database can be restored with point-in-time restore.
enabled_cloudwatch_logs_exports	jsonb	A list of log types that this DB cluster is configured to export to CloudWatch Logs.
endpoint	text	Specifies the connection endpoint for the primary instance of the DB cluster.
engine	text	The name of the database engine to be used for this DB cluster.
engine_mode	text	The DB engine mode of the DB cluster.
engine_version	text	Indicates the database engine version.
global_write_forwarding_requested	boolean	Specifies whether you have requested to enable write forwarding for a secondary cluster in an Aurora global database, or not.
global_write_forwarding_status	text	Specifies whether a secondary cluster in an Aurora global database has write forwarding enabled, or not.
hosted_zone_id	text	Specifies the ID that Amazon Route 53 assigns when you create a hosted zone.
http_endpoint_enabled	boolean	Specifies whether the HTTP endpoint for an Aurora Serverless DB cluster is enabled, or not.
iam_database_authentication_enabled	boolean	Specifies whether the the mapping of AWS IAM accounts to database accounts is enabled, or not.
kms_key_id	text	The AWS KMS key identifier for the encrypted DB cluster.
latest_restorable_time	timestamp with time zone	Specifies the latest time to which a database can be restored with point-in-time restore.
master_user_name	text	Contains the master username for the DB cluster.
members	jsonb	A list of instances that make up the DB cluster.
multi_az	boolean	Specifies whether the DB cluster has instances in multiple Availability Zones, or not.
option_group_memberships	jsonb	A list of option group memberships for this DB cluster.
partition	text	The AWS partition in which the resource is located (aws, aws-cn, or aws-us-gov).
pending_maintenance_actions	jsonb	A list that provides details about the pending maintenance actions for the resource.
percent_progress	text	Specifies the progress of the operation as a percentage.
port	bigint	Specifies the port that the database engine is listening on.
preferred_backup_window	text	Specifies the daily time range during which automated backups are created.
preferred_maintenance_window	text	Specifies the weekly time range during which system maintenance can occur
read_replica_identifiers	jsonb	A list of identifiers of the read replicas associated with this DB cluster.
reader_endpoint	text	The reader endpoint for the DB cluster.
region	text	The AWS Region in which the resource is located.
resource_id	text	The AWS Region-unique, immutable identifier for the DB cluster.
status	text	Specifies the status of this DB Cluster.
storage_encrypted	boolean	Specifies whether the DB cluster is encrypted, or not.
tags	jsonb	A map of tags for the resource.
tags_src	jsonb	A list of tags attached to the DB Cluster.
title	text	Title of the resource.
vpc_security_groups	jsonb	A list of VPC security groups that the DB cluster belongs to.

turbot/aws