How can I configure database proxy on lambda in serverless.yml?

Question

I am using serverless framework to provision infrastructure on AWS. And I need to add database proxy on my lambda but I couldn't find how to configure that. I have read the doc https://www.serverless.com/framework/docs/providers/aws/guide/functions/ but it doesn't mention anything relate to database proxy.

Below screenshot is the bottom of lambda in aws console. How can I add the proxy via serverless.yml?

Probably need to custom define it using Resources section.

Marcin
– Marcin

2020-10-20 11:39:00 +00:00
Commented Oct 20, 2020 at 11:39 — Marcin
– Marcin, Commented Oct 20, 2020 at 11:39

jeffmurphy · Accepted Answer · 2021-07-03 18:03:16Z

2

Go to your RDS server and click on the proxy
Copy the Proxy ARN
Edit your serverless.yml and

provider:
  name: aws
  iam:
    role:
      statements:
        - Effect: "Allow"
          Action:
            - "rds-db:connect"
          Resource: "arn:aws:rds-db:us-east-1:123123123:admin:blah-123abc123abc/*"

Note that "rds" in the ARN was changed to "rds-db" and "db-proxy" in the ARN was changed to "admin" (the admin user of the database). sls deploy and check the lambda. You should see the proxy in the database proxy configuration section.

For example, the Proxy ARN I copied from RDS was

arn:aws:rds:us-east-1:123123123:db-proxy:blah-123abc123abc

and I edited it to be

arn:aws:rds-db:us-east-1:123123123:admin:blah-123abc123abc/*

Also, be sure your lambda is in the same Vpc as the RDS proxy or it will not be able to connect.

I am using:

% sls --version
Framework Core: 2.50.0
Plugin: 5.4.3
SDK: 4.2.3
Components: 3.13.2

answered Jul 3, 2021 at 18:03

jeffmurphy

4562 silver badges11 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Caner Over a year ago

In my case I needed to change dbuser in resource string to admin like arn:aws:rds-db:us-east-1:123123123:dbuser:blah-123abc123abc/* as documented here

Collectives™ on Stack Overflow

How can I configure database proxy on lambda in serverless.yml?

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related