Connectivity with Amazon RDS

Transcription

1 Connectivity with Amazon RDS 1) Amazon RDS Credentials To connect to Amazon RDS you will need what is referred to as an Access Key and a Secret Key. These keys are associated with your Amazon AWS account and can be generated under the Security Credentials tab of your AWS account management page. The keys are generated in pairs (exactly one secret key for every access key). 2) Creating a DB Instance To create a DB instance, first create a new process and add the Amazon RDS invoker. Set your Amazon AWS Access Key and Secret key in the Amazon RDS Invoker session properties.

2 Next, create a DJMessage object process variable. This will hold the response from Amazon for each operation we perform. Be sure to set the DJMessage in your process start step.

3 Next, add an invoker step to your process. Set the invoker type to Amazon RDS and the Target message to your DJMessage object. Set the operation to CreateDBInstance.

4 Now fill in the fields with your values: o DBName: Name of a database to create when you create the database instance. If no name is supplied, no database will be created. o DBInstanceIdentifier: Name of your database instance. o Allocated Storage: Amount in gigabytes to be initially allocated for your DBInstance. o DBInstanceClass: Amount of computing and memory power for your DBInstance. Valid values are db.m1.small, db.m1.large, db.m1.xlarge, db.m2.2xlarge, db.m2.4xlarge. o Engine: Name of the database engine to use. As of now, only MySQL5.1 is supported. o Master Username: Name of the master user for the DB Instance. o Master Password: The password for your master user.

5 o Availability Zone: The EC2 Availability Zone that the database instance will be created in. Not required. o PreferredMaintenanceWindow: Weekly minimum four hour range in which maintenance can occur. Format: ddd:hh24:mi-ddd:hh24:mi. Not required. o DB Parameter Group Name: Name of the DB Parameter Group to associate this instance with. Not Required. o Backup Retention Period: The number of days for which automated backups are kept. Not required, default is 1. o PreferredBackupWindow: Daily range in which backups are made. Format must be hh24:mi-hh24:mi. Not required. o Port: Port address on which to connect to the database. Default is o DBSecurityGroups: Comma delimited list of DB Security Groups to associate with this DB Instance.

6 If you were to execute the invoker and display the target message, the response from Amazon RDS should look like the following: <CreateDBInstanceResponse xmlns=" <CreateDBInstanceResult> <DBInstance> <DBInstanceIdentifier>dbinstance01</DBInstanceIdentifier> <DBInstanceClass>db.m1.small</DBInstanceClass> <Engine>mysql5.1</Engine> <DBInstanceStatus>creating</DBInstanceStatus> <MasterUsername>sa</MasterUsername> <DBName>testDB01</DBName> <AllocatedStorage>5</AllocatedStorage> <PreferredBackupWindow>03:00-05:00</PreferredBackupWindow> <BackupRetentionPeriod>0</BackupRetentionPeriod> <DBSecurityGroup> <DBSecurityGroupName>default</DBSecurityGroupName> <Status>active</Status> </DBSecurityGroup> <DBParameterGroup> <DBParameterGroupName>default.mysql5.1</DBParameterGroupName> <ParameterApplyStatus>in-sync</ParameterApplyStatus> </DBParameterGroup> <PreferredMaintenanceWindow>sun:05:00-sun:09:00</PreferredMaintenanceWindow> <PendingModifiedValues> <MasterUserPassword>****</MasterUserPassword> </PendingModifiedValues> </DBInstance> </CreateDBInstanceResult> <ResponseMetadata> <RequestId>b93ae1ea df-aa00-7bf464fc7b0d</RequestId> </ResponseMetadata> </CreateDBInstanceResponse> 3) Creating a DB Security Group Amazon uses DB Security Groups to control who can access your DB Instance. By default, network access to your database is prevented. In order to access your Database you must create authorizes a DB security group with your IP address range. Begin by creating a new invoker step. Set the invoker type to Amazon RDS, the message to your target DJMessage and set the operation to CreateDBSecurityGroup

7 DBSecurityGroupName: The name of the security group. DBSecurityGroupDescriptoin: The description of the security group. Note how we don t specify an IP address here. We will authorize our security group with the AuthorizeDBSecurityGroup operation. If you were to execute this invoker and display the target message, the response from Amazon should look like the following:

8 <CreateDBSecurityGroupResponse xmlns=" <CreateDBSecurityGroupResult> <DBSecurityGroup> <OwnerId> </OwnerId> <DBSecurityGroupName>testdbsecuritygroup</DBSecurityGroupName> <DBSecurityGroupDescription>this is a test group</dbsecuritygroupdescription> </DBSecurityGroup> </CreateDBSecurityGroupResult> <ResponseMetadata> <RequestId>f5ea6f5e df b5b5fed</RequestId> </ResponseMetadata> </CreateDBSecurityGroupResponse> 4) Authorize a Security Group Begin by adding an invoker step. Set the invoker type to Amazon RDS, set the Target message to your DJMessage and set the operation to AuthorizeSecurityGroupIngress.

9 DBSecurityGroupName: The name of the security group you wish to authorize. CIDRIP: The IP range to authorize. Must be a valid CIDRIP range. If accessing the database from an EC2 instance you can specify the EC2SecurityGroupName and OwnerId. If you were to execute the invoker stop and display the target message the response should look like the following:

10 <?xml version="1.0"?> <AuthorizeDBSecurityGroupIngressResponse xmlns=" <AuthorizeDBSecurityGroupIngressResult> <DBSecurityGroup> <OwnerId> </OwnerId> <DBSecurityGroupName>testdbsecuritygroup</DBSecurityGroupName> <DBSecurityGroupDescription>this is a test group</dbsecuritygroupdescription> <IPRange> <Status>authorized</Status> <CIDRIP> /32</CIDRIP> </IPRange> </DBSecurityGroup> </AuthorizeDBSecurityGroupIngressResult> <ResponseMetadata> <RequestId>8b b57-11df-83dd-d10e0c65f318</RequestId> </ResponseMetadata> </AuthorizeDBSecurityGroupIngressResponse> 5) Modify the DB Instance Now we must modify our DB instance to add the newly created security group so that we may access the database from our ip address. Begin by adding an invoker step. Set the invoker type to Amazon RDS and set the target message to your DJMessage and set the operation to ModifyDBInstance.

11 The ModifyDBInstance command allows you to change all the database instance settings. This can be used to add more storage or allocate more resources. Set the DBInstanceIdentifier to the name of you database instance. Set DBSecurityGroup to the name of your DBSecurityGroup. If you were to execute this invoker step and display the response it should look like the following:

12 <?xml version="1.0"?> <ModifyDBInstanceResponse xmlns=" <ModifyDBInstanceResult> <DBInstance> <DBInstanceIdentifier>dbinstance01</DBInstanceIdentifier> <DBInstanceClass>db.m1.small</DBInstanceClass> <Engine>mysql5.1</Engine> <DBInstanceStatus>available</DBInstanceStatus> <MasterUsername>sa</MasterUsername> <DBName>testDB01</DBName> <Endpoint> <Address>dbinstance01.cfmly0pv1wja.us-east-1.rds.amazonaws.com</Address> <Port>3306</Port> </Endpoint> <AllocatedStorage>5</AllocatedStorage> <InstanceCreateTime> T16:09:33.557Z</InstanceCreateTime> <PreferredBackupWindow>03:00-05:00</PreferredBackupWindow> <BackupRetentionPeriod>0</BackupRetentionPeriod> <DBSecurityGroup> <DBSecurityGroupName>default</DBSecurityGroupName> <Status>removing</Status> </DBSecurityGroup> <DBSecurityGroup> <DBSecurityGroupName>testdbsecuritygroup</DBSecurityGroupName> <Status>adding</Status> </DBSecurityGroup> <DBParameterGroup> <DBParameterGroupName>default.mysql5.1</DBParameterGroupName> <ParameterApplyStatus>in-sync</ParameterApplyStatus> </DBParameterGroup> <AvailabilityZone>us-east-1a</AvailabilityZone> <PreferredMaintenanceWindow>sun:05:00-sun:09:00</PreferredMaintenanceWindow> </DBInstance> </ModifyDBInstanceResult> <ResponseMetadata> <RequestId>9abbd344-4b58-11df ce17f1738</RequestId> </ResponseMetadata> </ModifyDBInstanceResponse> 6) Describe the DB Instance To connect to a DB instance we need to know the location of the server. To find this out we can execute the describe operaiton. Begin by adding an invoker step to the process. Set the invoker type to Amazon RDS, the target message to your DJMessage and the operaiton to DescribeDBInstances.

13 DBInstanceIdentifier: The name of the db instance you wish to describe. If left blank, all database instances will be described. Marker: Used to paginate results. A marker is supplied with each result. If supplied results will only be returned from the marker to max results. MaxRecords: The maximum number of records to be returned. Minimum 20, maximum 100. If you were to execute this step and display the response it should look like the following:

14 <?xml version="1.0"?> <DescribeDBInstancesResponse xmlns=" <DescribeDBInstancesResult> <DBInstance> <DBInstanceIdentifier>dbinstance01</DBInstanceIdentifier> <DBInstanceClass>db.m1.small</DBInstanceClass> <Engine>mysql5.1</Engine> <DBInstanceStatus>available</DBInstanceStatus> <MasterUsername>sa</MasterUsername> <DBName>testDB01</DBName> <Endpoint> <Address>dbinstance01.cfmly0pv1wja.us-east-1.rds.amazonaws.com</Address> <Port>3306</Port> </Endpoint> <AllocatedStorage>5</AllocatedStorage> <InstanceCreateTime> T16:09:33.557Z</InstanceCreateTime> <PreferredBackupWindow>03:00-05:00</PreferredBackupWindow> <BackupRetentionPeriod>0</BackupRetentionPeriod> <DBSecurityGroup> <DBSecurityGroupName>testdbsecuritygroup</DBSecurityGroupName> <Status>active</Status> </DBSecurityGroup> <DBParameterGroup> <DBParameterGroupName>default.mysql5.1</DBParameterGroupName> <ParameterApplyStatus>in-sync</ParameterApplyStatus> </DBParameterGroup> <AvailabilityZone>us-east-1a</AvailabilityZone> <PreferredMaintenanceWindow>sun:05:00-sun:09:00</PreferredMaintenanceWindow> </DBInstance> </DescribeDBInstancesResult> <ResponseMetadata> <RequestId>c02256fc-4b5a-11df ce17f1738</RequestId> </ResponseMetadata> </DescribeDBInstancesResponse> The server address is located in the endpoint tag: <Endpoint> <Address>dbinstance01.cfmly0pv1wja.us-east-1.rds.amazonaws.com</Address> <Port>3306</Port> </Endpoint> 7) Connect to the DB Instance

15 Connecting to the Amazon RDS DB is done through an ODBC connection. If not already present, download and install the MySQL ODBC driver. Next you will need to create an ODBC connection to the database on the machine you wish to connect with. After the ODBC connection is created, connecting to the Amazon RDS DB is can be done in map designer using either the MySQL connector or the ODBC connector.

16 Load the connector and select your ODBC connection as the data source. This will allow you to query and insert data into your DB instance. To perform other operations such as creating/modifying tables you may use a SQL step in your process.