How to configure database proxy (RDS) in serverless.yml

Serverless Framework
#1

Hello,

Wondering whether you can specify and ARN for a database proxy? I see it’s a feature marked as “preview”, and I cant find anything to do with proxies here: https://www.serverless.com/framework/docs/providers/aws/guide/serverless.yml/.

But thought I’de check on this forum incase??

Screen Shot 2020-05-11 at 17.15.12
Screen Shot 2020-05-11 at 17.15.123330×568 39.2 KB

EDIT: serverless seems to auto-magically create this when attaching an IAM Policy for IAM Database Access via a database proxy.

iamRoleStatements:
  - Effect: Allow
    Action:
      - "rds-db:connect"
    Resource: "arn:aws:rds-db:<region>:<database-arn-id>:dbuser:<proxy-arn-id>/*"
#2

Hello, I am looking for a sample use case on this too. Any luck with this yet?

#3

Unfortunately this still does not work for me. Anyone else had luck? Seems a big gap in documentation on the AWS site as well.

#4

My mistake was using the proxys’ ARN as the IAM resource for “rds-db:connect”. The resource has to be in the format:

"arn:aws:rds-db:<region>:<database-arn-id>:dbuser:<proxy-arn-id>/*"

If you compare that to the proxy ARN, you’ll notice the proxy ARN says “db-proxy” instead of “dbuser”, which is what fixed it in my case.

This resource was pretty helpful as well: https://itnext.io/work-with-aws-rds-proxy-9d7e09668080