steampipe plugin install aws

Table: aws_rds_db_proxy - Query Amazon RDS DB Proxy using SQL

The Amazon RDS DB Proxy is a fully managed, highly available database proxy for Amazon Relational Database Service (RDS) that makes applications more scalable, more resilient to database failures, and more secure. The DB Proxy maintains a pool of established connections to your RDS instances, improving efficiency by reducing the time and resources associated with establishing new connections. It also provides failover support for the databases and includes features for enhanced security.

Table Usage Guide

The aws_rds_db_proxy table in Steampipe provides you with information about DB Proxies within Amazon Relational Database Service (RDS). This table enables you, as a DevOps engineer, DBA, or other technical professional, to query proxy-specific details, including the proxy's ARN, name, engine family, role ARN, status, and more. You can utilize this table to gather insights on DB Proxies, such as their current status, the engine family they are associated with, the IAM role they are utilizing, and more. The schema outlines the various attributes of the DB Proxy for you, including the proxy ARN, creation date, updated date, and associated tags.


List of DB proxies and corresponding engine families

Explore which database proxies are currently active and their corresponding engine families. This can help in managing and optimizing your database resources effectively.


Authentication info of each DB proxy

Explore the authentication information for each database proxy. This can be useful to understand the authentication methods in use, which can aid in security audits and compliance checks.

a ->> 'AuthScheme' as auth_scheme,
a ->> 'Description' as auth_description,
a ->> 'IAMAuth' as iam_auth,
a ->> 'SecretArn' as secret_arn,
a ->> 'UserName' as user_name
jsonb_array_elements(auth) as a;
json_extract(a.value, '$.AuthScheme') as auth_scheme,
json_extract(a.value, '$.Description') as auth_description,
json_extract(a.value, '$.IAMAuth') as iam_auth,
json_extract(a.value, '$.SecretArn') as secret_arn,
json_extract(a.value, '$.UserName') as user_name
json_each(auth) as a;

Schema for aws_rds_db_proxy

_ctxjsonbSteampipe context in JSON form.
account_idtext=, !=, ~~, ~~*, !~~, !~~*The AWS Account ID in which the resource is located.
akasjsonbArray of globally unique identifier strings (also known as) for the resource.
authjsonbOne or more data structures specifying the authorization mechanism to connect to the associated RDS DB instance or Aurora DB cluster.
created_datetimestamp with time zoneThe date and time when the proxy was first created.
db_proxy_arntextThe Amazon Resource Name (ARN) for the proxy
db_proxy_nametext=The identifier for the proxy.
debug_loggingbooleanWhether the proxy includes detailed information about SQL statements in its logs.
endpointtextThe endpoint that you can use to connect to the DB proxy.
engine_familytextThe kinds of databases that the proxy can connect to.
idle_client_timeoutbigintThe number of seconds a connection to the proxy can have no activity before the proxy drops the client connection.
partitiontextThe AWS partition in which the resource is located (aws, aws-cn, or aws-us-gov).
regiontextThe AWS Region in which the resource is located.
require_tlsbooleanIndicates whether Transport Layer Security (TLS) encryption is required for connections to the proxy.
role_arntextThe Amazon Resource Name (ARN) for the IAM role that the proxy uses to access Amazon Secrets Manager.
sp_connection_nametext=, !=, ~~, ~~*, !~~, !~~*Steampipe connection name.
sp_ctxjsonbSteampipe context in JSON form.
statustextThe current status of this proxy.
tagsjsonbA map of tags for the resource.
titletextTitle of the resource.
updated_datetimestamp with time zoneThe date and time when the proxy was last updated.
vpc_idtextProvides the VPC ID of the DB proxy.
vpc_security_group_idsjsonbProvides a list of VPC security groups that the proxy belongs to.
vpc_subnet_idsjsonbThe EC2 subnet IDs for the proxy.


This table is available as a standalone Exporter CLI. Steampipe exporters are stand-alone binaries that allow you to extract data using Steampipe plugins without a database.

You can download the tarball for your platform from the Releases page, but it is simplest to install them with the script:

/bin/sh -c "$(curl -fsSL" -- aws

You can pass the configuration to the command with the --config argument:

steampipe_export_aws --config '<your_config>' aws_rds_db_proxy