Breaking News: Grepper is joining You.com. Read the official announcement!

Terraform script to configure AWS RDS with high availability, performance, and security considerations, complementing the VPC setup previously discussed. This script will create a multi-AZ PostgreSQL RDS instance, which is appropriate for a production env

Joyous Jaguar answered on April 20, 2024 Popularity 1/10 Helpfulness 1/10

answer Terraform script to configure AWS RDS with high availability, performance, and security considerations, complementing the VPC setup previously discussed. This script will create a multi-AZ PostgreSQL RDS instance, which is appropriate for a production env

Terraform script to configure AWS RDS with high availability, performance, and security considerations, complementing the VPC setup previously discussed. This script will create a multi-AZ PostgreSQL RDS instance, which is appropriate for a production env

Comment

provider "aws" {
  region = "us-east-1"
}

resource "aws_db_subnet_group" "rds_subnet_group" {
  name        = "my-rds-subnet-group"
  subnet_ids  = ["${aws_subnet.subnet_az1.id}", "${aws_subnet.subnet_az2.id}"]

  tags = {
    Name = "My DB Subnet Group"
  }
}

resource "aws_db_instance" "claims_db" {
  identifier = "claimsdb"
  engine     = "postgres"
  engine_version = "12.3"  # Specify the version of PostgreSQL you want to use
  instance_class = "db.m5.large"  # Choose instance size based on your workload

  allocated_storage = 100  # in GB
  storage_type      = "gp2"  # General Purpose SSD
  iops              = 1000  # Provisioned IOPS, adjust if using io1 storage type

  name     = "claimsdb"
  username = "dbadmin"
  password = "YourSecurePasswordHere"

  db_subnet_group_name = aws_db_subnet_group.rds_subnet_group.name
  vpc_security_group_ids = ["${aws_security_group.db_sg.id}"]

  multi_az = true  # Enable Multi-AZ for high availability

  backup_retention_period = 7  # in days
  skip_final_snapshot = true  # Set to false if you need a final snapshot when deleting the DB

  # Enable encryption
  storage_encrypted = true
  kms_key_id        = aws_kms_key.db_encryption_key.arn

  # Deletion protection
  deletion_protection = true

  tags = {
    Name = "ClaimsDB"
  }
}

resource "aws_security_group" "db_sg" {
  name        = "db-security-group"
  description = "Database security group"
  vpc_id      = aws_vpc.claims_vpc.id

  ingress {
    from_port   = 5432
    to_port     = 5432
    protocol    = "tcp"
    cidr_blocks = ["10.0.0.0/16"]  # Adjust based on your VPC CIDR or specific IPs
  }

  egress {
    from_port   = 0
    to_port     = 0
    protocol    = "-1"
    cidr_blocks = ["0.0.0.0/0"]
  }

  tags = {
    Name = "DBSecurityGroup"
  }
}

resource "aws_kms_key" "db_encryption_key" {
  description             = "KMS key for RDS database encryption"
  enable_key_rotation     = true
}

output "db_instance_endpoint" {
  value = aws_db_instance.claims_db.endpoint
}

output "db_instance_name" {
  value = aws_db_instance.claims_db.name
}

Popularity 1/10 Helpfulness 1/10 Language whatever

Source: chat.openai.com

Tags: aws-rds configure env multi-az postgresql production rds script security terraform this vpc whatever

Link to this answer
Share Copy Link

Contributed on Apr 20 2024

Joyous Jaguar

0 Answers Avg Quality 2/10

Terraform script to configure AWS RDS with high availability, performance, and security considerations, complementing the VPC setup previously discussed. This script will create a multi-AZ PostgreSQL RDS instance, which is appropriate for a production env

Contents

More Related Answers

Terraform script to configure AWS RDS with high availability, performance, and security considerations, complementing the VPC setup previously discussed. This script will create a multi-AZ PostgreSQL RDS instance, which is appropriate for a production env

Grepper

Documentation

Social

Legal

Contact

Oops, You will need to install Grepper and log-in to perform this action.