SelectStar

Amazon RDS

Connection Information

The following information is required by SelectStar in order to monitor to your Amazon RDS databases:

Field
API Field
Description

Region

region

AWS region containing the resources you wish to monitor. One of: US East (N Virginia), US East (Ohio), US West (N. California), US West (Oregon), Government Cloud, Canada (Central), South America (São Paulo), EU (Ireland), EU (Frankfort), EU (London), Asia Pacific (Mumbai), Asia Pacific (Tokyo), Asia Pacific (Seoul), Asia Pacific (Singapore), Asia Pacific (Sydney)

Name Filter Condition

conditions

Optional filter for instance names. One of: NONE [default], EQUALS, CONTAINS, STARTS WITH

Name Filter

filter

Condition that filters the tables

Credentials

Field
API Field
Description

Access Key ID

access_key_id

Provided through AWS Access Identity and IAM

Secret Access Key

secret_access_key

Access key's secret key

Access Rights

IAM User

Please create an IAM user with an access key. You'll need the Access Key ID and Secret Access Key when configuring RDS connection in SelectStar.

Please attach the predefined AmazonRDSReadOnlyAccess policy to the IAM user. You can find this policy by its ARN (arn:aws:iam::aws:policy/AmazonRDSReadOnlyAccess).

Also attach the predefined CloudWatchReadOnlyAccess policy to the IAM user. You can find this policy by its ARN (arn:aws:iam::aws:policy/CloudWatchReadOnlyAccess).

Amazon RDS Read-Only Access Policy

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Action": [
        "rds:Describe*",
        "rds:ListTagsForResource",
        "ec2:DescribeAccountAttributes",
        "ec2:DescribeAvailabilityZones",
        "ec2:DescribeSecurityGroups",
        "ec2:DescribeVpcs"
      ],
      "Effect": "Allow",
      "Resource": "*"
    },
    {
      "Action": [
        "cloudwatch:GetMetricStatistics",
        "logs:DescribeLogStreams",
        "logs:GetLogEvents"
      ],
      "Effect": "Allow",
      "Resource": "*"
    }
  ]
}

CloudWatch Read-Only Access Policy

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Action": [
        "autoscaling:Describe*",
        "cloudwatch:Describe*",
        "cloudwatch:Get*",
        "cloudwatch:List*",
        "logs:Get*",
        "logs:Describe*",
        "logs:TestMetricFilter",
        "sns:Get*",
        "sns:List*"
      ],
      "Effect": "Allow",
      "Resource": "*"
    }
  ]
}