--- title: "How To Get Started with Cloud Databases and Amazon RDS" description: "Learn to use cloud relational databases with the Amazon RDS service and migrate to the cloud in this ATA Learning tutorial!" canonical: "https://adamtheautomator.com/amazon-rds/" --- # How To Get Started with Cloud Databases and Amazon RDS > Learn to use cloud relational databases with the Amazon RDS service and migrate to the cloud in this ATA Learning tutorial! Source: https://adamtheautomator.com/amazon-rds/ --- ATA Learning Tap to hide [ ATA Learning ](/) * [Home](/) * [Tutorials](/tutorials/) * [Instructors](/author/) * [Advertising](/advertising/) * [Recommended Resources](/resources/) * [About Adam](/about-adam/) Search for: * [](https://twitter.com/adbertram) * [](https://github.com/Adam-the-Automator) * [](https://www.linkedin.com/company/adam-the-automator-llc) * [](/feed/) ![How To Get Started with Cloud Databases and Amazon RDS](https://adamtheautomator.com/wp-content/uploads/2022/06/How-To-Get-Started-with-Cloud-Databases-and-Amazon-RDS.jpg) # How To Get Started with Cloud Databases and Amazon RDS [![](https://secure.gravatar.com/avatar/2788bb1a3f735603f81eca51d68daec56a9d97e805a10268fb2c20afcc76b81b?s=192&d=mm&r=g)Nicholas Xuan Nguyen](https://adamtheautomator.com/author/nicholas-xuan-nguyen/)11 July 202211 min. read Categories: [IT Ops](/category/it-ops/) Tags:[AWS](/tag/aws/)[Databases](/tag/databases/) Table of Contents * [Prerequisites](#prerequisites) * [What is Amazon RDS?](#what-is-amazon-rds) * [Creating a Dedicated IAM User for Amazon RDS](#creating-a-dedicated-iam-user-for-amazon-rds) * [Creating an RDS Database Instance via the AWS Console](#creating-an-rds-database-instance-via-the-aws-console) * [Creating an IAM User with Programmatic Access](#creating-an-iam-user-with-programmatic-access) * [Creating an RDS Database Instance via the AWS CLI](#creating-an-rds-database-instance-via-the-aws-cli) * [Removing DB Instances via the AWS CLI](#removing-db-instances-via-the-aws-cli) * [Conclusion](#conclusion) As the world moves more and more toward cloud-based solutions, knowing how to utilize cloud database also become more crucial. But don’t worry. [Amazon Relational Database Service (Amazon RDS)](https://aws.amazon.com/rds/) is just what you need. With Amazon RDS, you get to focus on your applications so you can give them the fast performance, high availability, security, and compatibility they need. And in this tutorial, you’ll learn how to get started with Amazon RDS, a cloud database service provided by Amazon Web Services. Ready? Read on to get started! ## Prerequisites This tutorial will be a hands-on demonstration. If you’d like to follow along, be sure you have: * An AWS account – You can [create one for free](https://portal.aws.amazon.com/billing/signup?type=enterprise#/start/email) if you don’t have one yet. * [AWS CLI installed](https://docs.aws.amazon.com/cli/latest/userguide/getting-started-install.html) and configured on your machine. This tutorial uses AWS CLI on Ubuntu 20.04 Linux environment. Related:[How to Install Ubuntu 20.04 \[Step-by-Step\]](https://adamtheautomator.com/install-ubuntu/) ## What is Amazon RDS? Amazon RDS is a web service that eases setting up, operating, and scaling relational databases in the cloud. Amazon RDS provides cost-efficient and resizable capacity. All these while automating time-consuming administration tasks, such as hardware provisioning, database setup, patching, and backups. Why use Amazon RDS? Suppose you’re running a web application that needs a database backend. But typically, you don’t want to deal with the hassle of setting up and maintaining your own database server. Or maybe you’re already using Amazon EC2 for your web application and want to offload the database workload. Whatever your reasons, Amazon RDS comes in handy to set up and operate your relational database in the cloud. ## Creating a Dedicated IAM User for Amazon RDS Assuming you already have an AWS account, you’re now ready to create a database instance using the [AWS console](https://aws.amazon.com/console/). But first, you’ll have to create an AWS Identity and Access Management (IAM) user with proper permissions to work with Amazon RDS. IAM is a feature of your AWS account that provides security credentials to services and users you register with IAM. With IAM, you can securely control access to your AWS resources. Related:[Learning Identity and Access Management (IAM) AWS Through Examples](https://adamtheautomator.com/iam-aws/) Instead of a root account, you need an IAM user when you want to use the Amazon RDS API or the AWS Command Line Interface (AWS CLI) to work with Amazon RDS. > _If you use the root account credentials to access AWS resources, you have to share the same credentials with everyone who needs access to those resources. This setup can lead to security issues if the credentials are compromised._ To create an IAM user via the AWS console: 1\. Sign in to the [AWS Management Console](https://signin.aws.amazon.com/signin?redirect_uri=https%3A%2F%2Fconsole.aws.amazon.com) using your root account credentials, and click on Sign in. ![Signing in to the AWS Management Console Using Root Credentials](https://adamtheautomator.com/wp-content/uploads/2022/06/image-413.png) Signing in to the [AWS Management Console](https://signin.aws.amazon.com/signin?redirect_uri=https%3A%2F%2Fconsole.aws.amazon.com) Using Root Credentials 2\. Next, search for **IAM** in the search box at the top, and click on IAM on the list of results, as shown below, to access the IAM console. ![Accessing the IAM Console](https://adamtheautomator.com/wp-content/uploads/2022/06/image-414.png) Accessing the IAM Console 3\. On the IAM dashboard, click on **Users** in the left panel shown below to see the Users page (step four), where you can manage IAM users under your root account. ![Accessing the Users Page](https://adamtheautomator.com/wp-content/uploads/2022/06/image-415.png) Accessing the Users Page 4\. Now, click on **Add users** (top-right) to initialize adding a new IAM user. ![Adding a New IAM User](https://adamtheautomator.com/wp-content/uploads/2022/06/image-416.png) Adding a New IAM User 5\. Configure the user details with the following: * Provide a unique **User name** for the user, but this tutorial’s choice is **rds-console**. * Tick the **Password – AWS Management Console access** check box to enable password access for the user. * Select the **Custom password** option, and set a strong password for the user. * Tick the **Require password reset** box to require a password change when the user logs in for the first time. * Click on **Next: Permissions** to start adding permissions to the new user (step six). ![Setting User Details](https://adamtheautomator.com/wp-content/uploads/2022/06/image-417.png) Setting User Details 6\. On the **Add user** page, click on **Add user to group —> Create** **group** to initialize creating a new IAM user group. An IAM group is a collection of IAM users with specific permissions. ![Initializing Creating an IAM User Group](https://adamtheautomator.com/wp-content/uploads/2022/06/image-418.png) Initializing Creating an IAM User Group 7\. Now, configure the new IAM user group with the following: * Provide a unique **Group name**, but this tutorial’s choice is **rds-console-users**. * Tick the box beside the **AdministratorAccess** option to select it, which serves as an [IAM role](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles.html). An IAM role lets you delegate access to users, and you can see that this role provides full access to all Amazon RDS resources. * Click on **Create group** (bottom-right) to create your first group and redirect the browser back to the **Add user** page. ![Create a New Group with Administrator Access](https://adamtheautomator.com/wp-content/uploads/2022/06/image-419.png) Create a New Group with Administrator Access 8\. Back to the Add user page, click on **Next: Tags** to continue configuring the new user details. ![Confirming the New User Group](https://adamtheautomator.com/wp-content/uploads/2022/06/image-420.png) Confirming the New User Group 9\. Skip adding tags, and click on **Next: Review** to view the summary of the new user details. ![Skipping Adding Tags](https://adamtheautomator.com/wp-content/uploads/2022/06/image-421.png) Skipping Adding Tags 10\. Next, review the new user details, and click on **Create user** at the bottom to create your first IAM user. ![Creating a New IAM User](https://adamtheautomator.com/wp-content/uploads/2022/06/image-422.png) Creating a New IAM User You’ll see a Success message after creating the new IAM user, as shown below. Note down the AWS Management Console access URL. You’ll need this access URL to log into the AWS Management Console as your new IAM user. ![Confirming Successful User Creation ](https://adamtheautomator.com/wp-content/uploads/2022/06/image-423.png) Confirming Successful User Creation 11\. Finally, navigate to your **Users** page to see your new IAM user on the list, as shown below. ![Viewing All Users](https://adamtheautomator.com/wp-content/uploads/2022/06/image-424.png) Viewing All Users ## **Creating an RDS Database Instance via the AWS Console** Now that you have an IAM user with the necessary permissions, it’s time to create an Amazon RDS database instance. There are two methods to create an Amazon RDS, via the AWS Console and AWS CLI, but you’ll use the former method for a start. To create an RDS database instance via the AWS Console: 1\. Logout from your root account and navigate to the AWS Management Console access URL you noted in step 10 of the “Creating a Dedicated IAM User for Amazon RDS” section. On the IAM user login page, enter your IAM user’s credentials, and click on Sign in. Since this is the first time you’re logging in as the IAM user, you’ll be asked to set up a new password (step two). ![Logging in as the IAM User](https://adamtheautomator.com/wp-content/uploads/2022/06/image-425.png) Logging in as the IAM User 2\. Next, provide and confirm a new password, and click on Confirm password change to secure your account. Once changed, your browser redirects to the AWS Management Console. ![Changing Account Password](https://adamtheautomator.com/wp-content/uploads/2022/06/image-426.png) Changing Account Password 3\. Search for RDS in the search box at the top, and choose RDS to access the RDS Management Console. ![Accessing the RDS Management Console](https://adamtheautomator.com/wp-content/uploads/2022/06/image-427.png) Accessing the RDS Management Console 4\. Click on **Databases** in the left panel while in the Amazon RDS Management Console to see the list of available databases, which is empty, as shown below. ![Accessing Available Databases](https://adamtheautomator.com/wp-content/uploads/2022/06/image-428.png) Accessing Available Databases 5\. Now, click on the **Create database** button (top-right) to initialize creating a new SQL database instance. ![Initializing Creating a New Database](https://adamtheautomator.com/wp-content/uploads/2022/06/image-429.png) Initializing Creating a New Database 6\. **Choose a database creation method** you prefer. But for this tutorial, the choice is the **Standard create method** since it lets you specify all the configuration options for your database instance. ![Selecting Database Creation](https://adamtheautomator.com/wp-content/uploads/2022/06/image-430.png) Selecting Database Creation 7\. Configure your **Engine options** with the following: * Select an **Engine type** you prefer since Amazon RDS supports multiple database engines. But in this example, you’ll use the **Microsoft SQL Server**. * Select **Amazon** **RDS** as your **Database management type**. * Select **SQL Server Express Edition** since it is a free edition of SQL Server. * Select your preferred version of SQL Server. But for this tutorial, you’ll use SQL Server 2019 Express Edition, the latest version at the time of writing. ![Configuring Ending Options](https://adamtheautomator.com/wp-content/uploads/2022/06/image-431.png) Configuring Ending Options 8\. Scroll down to the **Settings** section and configure your database name and credentials as follows: * Provide a descriptive name for your database instance (**database-1**) under **DB instance identifier**. * Provide a username **(rds\_console)** and password for the master user for logging into your database instance. ![Setting Credentials for the Database](https://adamtheautomator.com/wp-content/uploads/2022/06/image-432.png) Setting Credentials for the Database 9\. Under the **Storage** section, configure your database’s storage with the following: * Keep the default **Storage type** value (**General purpose (SSD)**) since it’s a fast storage type suitable for most workloads. * Set **Allocated storage** (in GB) to provision for your database instance (minimum storage size is 20 GB). The more storage you allocate, the more I/O operations your database instance can process. But remember, more storage also costs more. * Untick the **Storage autoscaling** option since you don’t want Amazon RDS to auto-scale the storage for your database instance. You instead want to control the storage size manually. ![Configuring Storage Type](https://adamtheautomator.com/wp-content/uploads/2022/06/image-433.png) Configuring Storage Type 10\. Keep other settings at default since you won’t need to change them for this tutorial, and click on **Create database** to create your MySQL database instance. ![Creating the MySQL Database Instance](https://adamtheautomator.com/wp-content/uploads/2022/06/image-434.png) Creating the MySQL Database Instance 11\. Finally, navigate to your **Databases** page again, and you’ll see your newly-created database instance with **Creating** status. Click the **Refresh** button to refresh the list and see the latest status. ![Verifying Newly-created MySQL Database](https://adamtheautomator.com/wp-content/uploads/2022/06/image-435.png) Verifying Newly-created MySQL Database After creating the database, the status changes **Available**, indicating your database instance is ready to use, as shown below. ![Verifying Database Status](https://adamtheautomator.com/wp-content/uploads/2022/06/image-436.png) Verifying Database Status ## Creating an IAM User with Programmatic Access Creating an RDS Database Instance Using the AWS Console undoubtedly works. But perhaps you’re looking for a way to make the database creation repeatable and automated. In that case, the AWS console is not your best choice since it requires user intervention to perform various tasks manually. Luckily, AWS lets you create and manage AWS resources using code via the AWS CLI. With the AWS CLI, you can integrate your database provisioning process with your IaC or CI/CD pipeline. Related:[How To Manage IaC with Ansible CloudFormation in AWS](https://adamtheautomator.com/ansible-cloudformation/) Before creating an RDS database instance via the AWS CLI, you’ll first have to create a dedicated IAM user programmatic access to the IAM user. Doing so permits the IAM user to access the AWS CLI. 1\. Log out from your IAM user (rds-console), and log in to your root AWS account. 2\. Initialize creating an IAM user as you did in steps three to four of the “Creating A Dedicated IAM User for Amazon RDS” section. ![Initializing Adding a New IAM User’](https://adamtheautomator.com/wp-content/uploads/2022/06/image-437.png) Initializing Adding a New IAM User’ 3\. Configure the user details and AWS access type with the following: * Provide a unique name for your IAM user (**rds-cli**). * Tick the **Access key** – **Programmatic access** option. This option allows the IAM user to access AWS resources via the AWS CLI authenticated by the access key ID and secret access key. * Click the **Next: Permissions** button to continue. ![Setting User Details](https://adamtheautomator.com/wp-content/uploads/2022/06/image-438.png) Setting User Details 4\. Now, select **Add user to group** —> **Create group** to create a new group. ![Creating a New Group](https://adamtheautomator.com/wp-content/uploads/2022/06/image-439.png) Creating a New Group 5\. Configure the new group details as follows: * Provide a unique name for your group (**rds-cli**). * Tick the **AmazonRDSFullAccess** role from the list to allow this group to manage all Amazon RDS resources. You can also fine-tune the permissions by selecting specific Amazon RDS actions that this group is allowed to perform by editing the JSON policy document. * Click on **Create group** button to create the group. ![Configuring the New Group](https://adamtheautomator.com/wp-content/uploads/2022/06/image-440.png) Configuring the New Group 6\. Back to the **Add user** page, tick the box beside the new group (**rds-cli**), and click on the **Next: Tags** button to continue. ![Back to the Add user page](https://adamtheautomator.com/wp-content/uploads/2022/06/image-441.png) Back to the Add user page 7\. Skip adding tags and click on **Next: Review**, so you can review the settings you configured for the new IAM user. ![Skipping Adding Tags](https://adamtheautomator.com/wp-content/uploads/2022/06/image-442.png) Skipping Adding Tags 8\. Review the new user settings summary, and click on **Create user** to create the IAM user. Your browser redirects to the IAM user detail page (step nine). ![Creating the New IAM User](https://adamtheautomator.com/wp-content/uploads/2022/06/image-443.png) Creating the New IAM User 9\. Lastly, click on **Download .csv** to download the CSV file or copy the **Access key ID** and **Secret access key** and store them safely. You will not see these keys again after you leave this page. ![Viewing the Access Key ID and Secret Access Key](https://adamtheautomator.com/wp-content/uploads/2022/06/image-444.png) Viewing the Access Key ID and Secret Access Key ## **Creating an RDS Database Instance via the AWS CLI** After creating a dedicated IAM user with the necessary permissions for your CLI environment, you’re now ready to create your RDS database instance via the AWS CLI. But first, ready the keys you noted in the last step of the “Creating an IAM User with Programmatic Access” section. 1\. Open your terminal and run the following [configure](https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-files.html) command to configure your IAM user credentials. This command creates a new file called _credentials_ in the _~/.aws_ directory. This _credentials_ file stores your IAM user credentials, so you don’t have to provide them every time you run an AWS CLI command. ```bash aws configure ``` Provide the following when prompted: * **AWS Access Key ID** – The Access key ID of your IAM user. * **AWS Secret Access Key** – The Secret access key of your IAM user. * **Default region name** – The AWS Region you prefer to use, but the choice for this tutorial is **us-east-1**. * **Default output format** – Enter json since the json output is human readable. ![Configuring the New IAM User Credentials](https://adamtheautomator.com/wp-content/uploads/2022/06/image-445.png) Configuring the New IAM User Credentials 2\. Next, run the below [sts get-caller-identity](https://docs.aws.amazon.com/cli/latest/reference/sts/get-caller-identity.html) command to verify the AWS CLI can assume the IAM role you created in the previous section. ```bash aws sts get-caller-identity ``` Ensure you note down the ARN value. You’ll later compare that ARN with the one in your IAM console. ![Verify AWS CLI Can Assume the IAM Role](https://adamtheautomator.com/wp-content/uploads/2022/06/image-446.png) Verify AWS CLI Can Assume the IAM Role > _If you see the error message saying “An error occurred (AccessDenied),” make sure you correctly configured your IAM user credentials. At the same time, verify the proper permissions have been attached to the IAM user and/or group._ ![Getting an AccessDenied Error](https://adamtheautomator.com/wp-content/uploads/2022/06/image-447.png) Getting an AccessDenied Error 3\. Navigate to your IAM user detail page on your IAM console, and compare the ARN with the one you noted in step one. If the ARNs match, you can settle down that your IAM user can assume the IAM role you created. ![Comparing the ARN Values](https://adamtheautomator.com/wp-content/uploads/2022/06/image-448.png) Comparing the ARN Values 4\. Now, run the [rds describe-db-instances](https://docs.aws.amazon.com/cli/latest/reference/rds/describe-db-instances.html) command below (without parameters) to get a list of all the DB instances in your AWS account. ```bash aws rds describe-db-instances ``` Your output should be blank, like the one below, since you haven’t created any DB instances yet. ![Listing DB Instances](https://adamtheautomator.com/wp-content/uploads/2022/06/image-449.png) Listing DB Instances 5\. Run the [rds create-db-instance](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/rds/create-db-instance.html) command below to create a new Amazon RDS MySQL database instance by passing the following parameters: * `--db-instance-identifier` – This parameter specifies a unique name for your new DB instance. In this tutorial, the identifier is `rds-mysql-instance`. * `--db-instance-class` – This parameter specifies the DB instance’s compute and memory capacity (`db.t3.micro`). * `--engine` – This parameter specifies the database engine (`mysql`) for this instance. * `--master-username` – This parameter specifies the username for the master user. In this tutorial, the username is `rds_cli`. * `--master-user-password` – This parameter specifies the password for the master user. You can set your own, but in this example, the password is `$trongpa$$word`. * –allocated-storage – This parameter specifies the storage size for the DB instance in gibibytes (GiB), which is 5GiB (minimum), in this tutorial. ```bash aws rds create-db-instance --db-instance-identifier rds-mysql-instance --db-instance-class db.t3.micro --engine mysql --master-username rds_cli --master-user-password $trongpa$$word --allocated-storage 5 ``` ![Creating a MYSQL Database Instance](https://adamtheautomator.com/wp-content/uploads/2022/06/image-450.png) Creating a MYSQL Database Instance 6\. Lastly, rerun the following rds describe-db-instances command to check the detailed information of the newly-created DB instance (rds-mysql-instance). ```bash aws rds describe-db-instances --db-instance-identifier rds-mysql-instance ``` ![Checking the Newly-created DB Instance’s Information](https://adamtheautomator.com/wp-content/uploads/2022/06/image-451.png) Checking the Newly-created DB Instance’s Information ## Removing DB Instances via the AWS CLI You’ve successfully created DB instances, but you wouldn’t want to keep one too many, right? AWS charges you hourly for a DB instance while it exists; even if not used, the cost adds up quickly. But with AWS CLI, you can remove DB instances that don’t serve a purpose anymore. Run the command below to remove the newly-created DB instance with the `--skip-final-snapshot` parameter. This parameter prevents Amazon RDS from taking a final DB snapshot before deleting the instance. ```bash aws rds delete-db-instance --db-instance-identifier rds-mysql-instance --skip-final-snapshot ``` ![Remove a DB Instance](https://adamtheautomator.com/wp-content/uploads/2022/06/image-452.png) Remove a DB Instance Now, run the `rds describe-db-instances` command below to check if the DB instance (`rds-mysql-instance`) has been deleted. ```bash aws rds describe-db-instances --db-instance-identifier rds-mysql-instance ``` If you see an error message like the one below, you’ve successfully deleted your target DB instance (**rds-mysql-instance**) ![Verifying Deleted DB Instance](https://adamtheautomator.com/wp-content/uploads/2022/06/image-453.png) Verifying Deleted DB Instance ## Conclusion In this article, you’ve learned to create IAM users and roles and Amazon RDS MySQL database instances. With all these awesomeness Amazon RDS showed you, avoid hugely unnecessary charges by deleting your DB instances when you’re done with them. At this point, you can confidently explore more about Amazon RDS and create and delete DB instances. You already have a running MySQL DB instance on Amazon RDS, so why not try to [import your local MySQL DB to the cloud](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/MySQL.Procedural.Importing.SmallExisting.html)? With your data in the cloud, you can then take advantage of all the benefits that come with it, such as scalability and high availability. Share this article [Share on X](https://twitter.com/intent/tweet?url=https%3A%2F%2Fadamtheautomator.com%2Famazon-rds%2F&text=How%20To%20Get%20Started%20with%20Cloud%20Databases%20and%20Amazon%20RDS)[Share on Facebook](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fadamtheautomator.com%2Famazon-rds%2F)[Share on LinkedIn](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fadamtheautomator.com%2Famazon-rds%2F) ## Related Posts ![](https://adamtheautomator.com/wp-content/uploads/publisher/2e05d9c85b2b8184bb24f8beaeb7f165/85751120c0fb4909afa44fc19e072a60152e0de73a44e1bba3c2dc4f2c71b424.webp) ### [SQL Server 2025 Upgrades: Avoid These Breaking Changes](/sql-server-upgrade-breaking-changes/) Avoid SQL Server 2025 upgrade failures. Master the breaking changes in encryption, TDS, and replication before you plan your migration. ![](https://adamtheautomator.com/wp-content/uploads/2022/05/HMaster-Your-Data-with-AWS-Quicksight.jpg) ### [Make Data-Driven Decisions with AWS QuickSight Analytics](/aws-quicksight/) Struggling to make sense of your data? Discover how AWS QuickSight transforms data into actionable insights for smarter decision-making. ![](https://adamtheautomator.com/wp-content/uploads/2024/01/mysql-indexes.jpg) ### [How To Use MySQL Indexes Through Examples](/mysql-indexes/) Supercharge your database with MySQL indexes. Optimize queries, boost speed—master the art effortlessly, and elevate performance in this tutorial! ## Categories * [IT Ops](/category/it-ops/) * [Cloud](/category/cloud/) * [DevOps](/category/devops/) * [Home Ops](/category/home-ops/) * [Information Security](/category/infosec/) * [Software Development](/category/software-development/) ## Site * [Home](/) * [Tutorials](/tutorials/) * [Instructors](/author/) * [Advertising](/advertising/) * [Recommended Resources](/resources/) * [About Adam](/about-adam/) Copyright 2026© ATA Learning | [Privacy Policy](/privacy/)