Table: aws_rds_db_proxy - Query Amazon RDS DB Proxy using SQL

The Amazon RDS DB Proxy is a fully managed, highly available database proxy for Amazon Relational Database Service (RDS) that makes applications more scalable, more resilient to database failures, and more secure. The DB Proxy maintains a pool of established connections to your RDS instances, improving efficiency by reducing the time and resources associated with establishing new connections. It also provides failover support for the databases and includes features for enhanced security.

Table Usage Guide

The aws_rds_db_proxy table in Steampipe provides you with information about DB Proxies within Amazon Relational Database Service (RDS). This table enables you, as a DevOps engineer, DBA, or other technical professional, to query proxy-specific details, including the proxy's ARN, name, engine family, role ARN, status, and more. You can utilize this table to gather insights on DB Proxies, such as their current status, the engine family they are associated with, the IAM role they are utilizing, and more. The schema outlines the various attributes of the DB Proxy for you, including the proxy ARN, creation date, updated date, and associated tags.

Examples

List of DB proxies and corresponding engine families

Explore which database proxies are currently active and their corresponding engine families. This can help in managing and optimizing your database resources effectively.

select
  db_proxy_name,
  status,
  engine_family
from
  aws_rds_db_proxy;

select
  db_proxy_name,
  status,
  engine_family
from
  aws_rds_db_proxy;

Authentication info of each DB proxy

Explore the authentication information for each database proxy. This can be useful to understand the authentication methods in use, which can aid in security audits and compliance checks.

select
  db_proxy_name,
  engine_family,
  a ->> 'AuthScheme' as auth_scheme,
  a ->> 'Description' as auth_description,
  a ->> 'IAMAuth' as iam_auth,
  a ->> 'SecretArn' as secret_arn,
  a ->> 'UserName' as user_name
from
  aws_rds_db_proxy,
  jsonb_array_elements(auth) as a;

select
  db_proxy_name,
  engine_family,
  json_extract(a.value, '$.AuthScheme') as auth_scheme,
  json_extract(a.value, '$.Description') as auth_description,
  json_extract(a.value, '$.IAMAuth') as iam_auth,
  json_extract(a.value, '$.SecretArn') as secret_arn,
  json_extract(a.value, '$.UserName') as user_name
from
  aws_rds_db_proxy,
  json_each(auth) as a;

Schema for aws_rds_db_proxy

Name	Type	Operators	Description
_ctx	jsonb		Steampipe context in JSON form.
account_id	text	=, !=, ~~, ~~, !~~, !~~	The AWS Account ID in which the resource is located.
akas	jsonb		Array of globally unique identifier strings (also known as) for the resource.
auth	jsonb		One or more data structures specifying the authorization mechanism to connect to the associated RDS DB instance or Aurora DB cluster.
created_date	timestamp with time zone		The date and time when the proxy was first created.
db_proxy_arn	text		The Amazon Resource Name (ARN) for the proxy
db_proxy_name	text	=	The identifier for the proxy.
debug_logging	boolean		Whether the proxy includes detailed information about SQL statements in its logs.
endpoint	text		The endpoint that you can use to connect to the DB proxy.
engine_family	text		The kinds of databases that the proxy can connect to.
idle_client_timeout	bigint		The number of seconds a connection to the proxy can have no activity before the proxy drops the client connection.
partition	text		The AWS partition in which the resource is located (aws, aws-cn, or aws-us-gov).
region	text		The AWS Region in which the resource is located.
require_tls	boolean		Indicates whether Transport Layer Security (TLS) encryption is required for connections to the proxy.
role_arn	text		The Amazon Resource Name (ARN) for the IAM role that the proxy uses to access Amazon Secrets Manager.
sp_connection_name	text	=, !=, ~~, ~~, !~~, !~~	Steampipe connection name.
sp_ctx	jsonb		Steampipe context in JSON form.
status	text		The current status of this proxy.
tags	jsonb		A map of tags for the resource.
title	text		Title of the resource.
updated_date	timestamp with time zone		The date and time when the proxy was last updated.
vpc_id	text		Provides the VPC ID of the DB proxy.
vpc_security_group_ids	jsonb		Provides a list of VPC security groups that the proxy belongs to.
vpc_subnet_ids	jsonb		The EC2 subnet IDs for the proxy.

Export

This table is available as a standalone Exporter CLI. Steampipe exporters are stand-alone binaries that allow you to extract data using Steampipe plugins without a database.

You can download the tarball for your platform from the Releases page, but it is simplest to install them with the steampipe_export_installer.sh script:

/bin/sh -c "$(curl -fsSL https://steampipe.io/install/export.sh)" -- aws

You can pass the configuration to the command with the --config argument:

steampipe_export_aws --config '<your_config>' aws_rds_db_proxy