Optional 44

• authmap({...}), default {...}Configuration block(s) with authorization mechanisms to connect to the associated instances or clusters
• connection_borrow_timeoutnumber, default nullThe number of seconds for a proxy to wait for a connection to become available in the connection pool
• createbool, default trueWhether cluster should be created (affects nearly all resources)
• create_iam_policybool, default trueDetermines whether an IAM policy is created
• create_iam_rolebool, default trueDetermines whether an IAM role is created
• db_cluster_identifierstring, default ""DB cluster identifier
• db_instance_identifierstring, default ""DB instance identifier
• debug_loggingbool, default falseWhether the proxy includes detailed information about SQL statements in its logs
• default_auth_schemestring, default nullDefault authentication scheme that the proxy uses for client connections to the proxy and connections from the proxy to the underlying database. Valid values are NONE and IAM_AUTH. Defaults to NONE
• endpoint_network_typestring, default nullNetwork type of the DB proxy endpoint. Valid values are IPV4, IPV6 and DUAL. Defaults to IPV4. If IPV6 is specified, the subnets associated with the proxy must be IPv6-only, and target_connection_network_type must be IPV6
• endpointsmap({...}), default {}Map of DB proxy endpoints to create and their attributes
• engine_familystring, default ""The kind of database engine that the proxy will connect to. Valid values are MYSQL or POSTGRESQL
• iam_policy_namestring, default ""The name of the role policy. If omitted, Terraform will assign a random, unique name
• iam_role_descriptionstring, default ""The description of the role
• iam_role_force_detach_policiesbool, default trueSpecifies to force detaching any policies the role has before destroying it
• iam_role_max_session_durationnumber, default 43200The maximum session duration (in seconds) that you want to set for the specified role
• iam_role_namestring, default ""The name of the role. If omitted, Terraform will assign a random, unique name
• iam_role_pathstring, default nullThe path to the role
• iam_role_permissions_boundarystring, default nullThe ARN of the policy that is used to set the permissions boundary for the role
• iam_role_tagsmap(string), default {}A map of tags to apply to the IAM role
• idle_client_timeoutnumber, default 1800The number of seconds that a connection to the proxy can be inactive before the proxy disconnects it
• init_querystring, default ""One or more SQL statements for the proxy to run when opening each new database connection
• kms_key_arnslist(string), default []List of KMS Key ARNs to allow access to decrypt SecretsManager secrets
• log_group_classstring, default nullSpecified the log class of the log group. Possible values are: STANDARD or INFREQUENT_ACCESS
• log_group_kms_key_idstring, default nullThe ARN of the KMS Key to use when encrypting log data
• log_group_retention_in_daysnumber, default 30Specifies the number of days you want to retain log events in the log group
• log_group_tagsmap(string), default {}A map of tags to apply to the CloudWatch log group
• manage_log_groupbool, default trueDetermines whether Terraform will create/manage the CloudWatch log group or not. Note - this will fail if set to true after the log group has been created as the resource will already exist
• max_connections_percentnumber, default 90The maximum size of the connection pool for each target in a target group
• max_idle_connections_percentnumber, default 50Controls how actively the proxy closes idle database connections in the connection pool
• namestring, default ""The identifier for the proxy. This name must be unique for all proxies owned by your AWS account in the specified AWS Region. An identifier must begin with a letter and must contain only ASCII letters, digits, and hyphens; it can't end with a hyphen or contain two consecutive hyphens
• proxy_tagsmap(string), default {}A map of tags to apply to the RDS Proxy
• regionstring, default nullRegion where the resource(s) will be managed. Defaults to the Region set in the provider configuration
• require_tlsbool, default trueA Boolean parameter that specifies whether Transport Layer Security (TLS) encryption is required for connections to the proxy
• role_arnstring, default ""The Amazon Resource Name (ARN) of the IAM role that the proxy uses to access secrets in AWS Secrets Manager
• session_pinning_filterslist(string), default []Each item in the list represents a class of SQL operations that normally cause all later statements in a session using a proxy to be pinned to the same underlying database connection
• tagsmap(string), default {}A map of tags to add to all resources
• target_connection_network_typestring, default nullNetwork type that the proxy uses to connect to the target database. Valid values are IPV4 and IPV6. Defaults to IPV4
• target_db_clusterbool, default falseDetermines whether DB cluster is targeted by proxy
• target_db_instancebool, default falseDetermines whether DB instance is targeted by proxy
• use_policy_name_prefixbool, default falseWhether to use unique name beginning with the specified iam_policy_name
• use_role_name_prefixbool, default falseWhether to use unique name beginning with the specified iam_role_name
• vpc_security_group_idslist(string), default []One or more VPC security group IDs to associate with the new proxy
• vpc_subnet_idslist(string), default []One or more VPC subnet IDs to associate with the new proxy