Skip to content

[v14] [docs] clarify RDS/Aurora databases getting modified #33410

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
greedy52 merged 1 commit into from
Oct 13, 2023
Merged

[v14] [docs] clarify RDS/Aurora databases getting modified #33410

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
18 changes: 16 additions & 2 deletions docs/pages/database-access/guides/rds.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -45,8 +45,15 @@ which supports IAM authentication.
(!docs/pages/includes/edition-prereqs-tabs.mdx!)

- AWS account with RDS and Aurora databases and permissions to create and attach
IAM policies. Your RDS and Aurora databases must have password and IAM
authentication enabled.
IAM policies.
<Admonition type="warning" title="IAM authentication">
Your RDS and Aurora databases must have password and IAM authentication
enabled.

If IAM authentication is not enabled on the target RDS and Aurora databases,
the Database Service will attempt to enable IAM authentication by modifying
them using respective APIs.
</Admonition>
- A Linux host or Amazon Elastic Kubernetes Service cluster where you will run
the Teleport Database Service, which proxies connections to your RDS
databases.
Expand Down Expand Up @@ -157,6 +164,13 @@ Follow these instructions on your Linux host.

(!docs/pages/includes/database-access/aws-bootstrap.mdx type="rds"!)

<Admonition type="note">
Teleport uses `rds:ModifyDBInstance` and `rds:ModifyDBCluster` to automatically
enable IAM authentication on the RDS instance and the Aurora cluster,
respectively. You can omit these permissions if IAM authentication is already
enabled.
</Admonition>

</TabItem>
<TabItem label="Kubernetes Cluster">

Expand Down
2 changes: 1 addition & 1 deletion docs/pages/database-access/reference/aws.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -155,7 +155,7 @@ policies for each discovery type are shown below.
</Tabs>

<Admonition type="note">
Teleport uses `rds:ModifyDBInstance` and `rds:DescribeDBClusters` to
Teleport uses `rds:ModifyDBInstance` and `rds:ModifyDBCluster` to
automatically enable [IAM
authentication](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.IAMDBAuth.html)
on the RDS instance and the Aurora cluster, respectively. You can omit these
Expand Down