Installing an RDS Database

Installing an RDS database

Follow this guide to install P0 on an AWS-RDS-managed PostgreSQL database. P0 manages individual PostgreSQL instances, PostgreSQL clusters, and Aurora PostgreSQL clusters in the same manner.

Prerequisites

Before you begin, ensure you have:

• Admin access to the database

• IAM authentication enabled on the database

• AWS permissions that allow you to create IAM policies, and grant those policies to roles

• AWS permissions that allow you to create ECR repositories, add images to that repository, create Lambda functions, and create VPC endpoints and security groups within the database's VPC

• A P0 AWS RDS integration installed on the VPC that hosts the database

Installation

Follow these steps to install P0 on a PostgreSQL instance or cluster:

Via the P0 app

1. Navigate to Integrations > PostgreSQL in the P0 app

2. Select the Access management component

3. Click Add instance

4. Enter a unique identifier for the instance (this can be any value you like)

5. Choose AWS RDS hosting

   1. Enter the ARN of the AWS RDS instance

   2. Select the installed P0 AWS RDS VPC integration

6. Click Next

7. Run the supplied SQL command in the PostgreSQL database

8. Run the supplied Terraform to deploy the P0 connector

9. Click Next

10. If desired, configure the port and default database

11. Click Finish

Via the P0 Terraform provider

1. Run the following SQL in the PostgreSQL database to create the admin user. If the user already exists, you can skip the CREATE USER statement or ignore the error.

CREATE USER p0_iam_manager;
GRANT rds_iam TO p0_iam_manager;
GRANT rds_superuser TO p0_iam_manager;

1. Ensure you have configured the P0 Terraform provider

2. Use the p0_postgres_staged resource to begin integration install

resource "p0_postgres_staged" "p0_postgres_cluster" {
  id = "exampleId"
  hosting = {
    type         = "aws-rds"
    instance_arn = <input>
    vpc_id = <input>
  }
}

1. Use the p0-db/aws module to set up your AWS environment

module "p0_aws_pg_install" {
  source  = "p0-security/p0-db/aws"
  version = "0.5.1"

  rds_arn = <input>

  connector_security_group_id = <input>
  lambda_execution_role_name  = <input>
}

1. Use the p0_postgres resource to finish integration install

resource "p0_postgres" "p0_postgres_cluster" {
  depends_on = [module.p0_aws_pg_install]
  id         = resource.p0_postgres_staged.p0_postgres.id
  default_db = "postgres"
}

1. Run terraform init and terraform apply