Synchronizing DB Resources from AWS

Overview

QueryPie supports AWS integration for database registration and management. You can synchronize resources within AWS to register them as databases managed by QueryPie, and grant access permissions and set policies for users and groups for the synchronized databases.

Registering AWS Integration Information in QueryPie

1. Navigate to the Cloud Provider menu from the Database settings menu.
2. Click the Create Provider button in the top right.
3. Enter a name that can distinguish the provider in the Name field.
4. Select Amazon Web Services from the Cloud Provider field.
5. Select the region of the resources you want to synchronize from the Region field.
6. Enter the Credential information required to synchronize resources.
   • For descriptions of each Credential method, refer to Setting Up Authentication Methods by Credential Type below.
7. Select the resources you want to synchronize from the Database Type Filter field.
8. You can use Search Filter to get a list of specific types of resources you want to synchronize.
   1. Search Filter works the same way as AWS search. You can use values such as name, host, OS, tags, etc. as filters, and you can conveniently enter search conditions and filters using the Enter key in the following order.
      1. Enter Key value and press Enter → Select search condition and press Enter → Enter Value and press Enter
9. Select the synchronization method from the Replication Frequency field.
   1. Manual : A method that synchronizes manually only when you want to synchronize.
   2. Scheduling : A method that synchronizes resources through periodic scheduling. Provides Cron Expressions.
10. Auto Configuration Upon Initial Synchronization You can specify some values for DBs that are first synchronized from the Cloud Provider. Initial value settings cannot be modified after saving the Cloud Provider. If changes to this setting are needed, you must delete the Cloud Provider and register it again.
    • Tag : You can automatically add tags to synchronized DBs.
      • If you enter {vpcid} in the tag value, the VPC ID of the Cloud that the DB belongs to will be automatically filled.
      • Example: If you set the tag Key to “Network” and enter Value as {vpcid}, when the DB is in “vpc-1a2b3c4d” VPC, the “Network: vpc-1a2b3c4d” tag will be automatically created.
11. Click the Save button to save the Cloud Provider.

Setting Up Authentication Methods by Credential Type

• Default Credentials (Instance Profile) : When the QueryPie server is installed in the same AWS account, you can synchronize resources within the same AWS by assigning policies to the IAM permissions of the EC2 instance where QueryPie is installed. Please assign policies appropriate for the required resources.
• Cross Account Role : You can synchronize resources from other AWS accounts by creating IAM roles. Please create permissions for synchronization and assign policies according to the steps displayed on the screen. (To synchronize resources through this Credential, you must set the AWS account where QueryPie is installed in the AWS_ACCOUNT_ID field of the environment variable file)
• Access Key : Provides a manual synchronization method that enters access key and secret key of the AWS account when clicking the Synchronize button.
  Starting from QueryPie 10.2.2, the “Save Credential for Synchronization” option is provided to enable scheduled synchronization even when using access key as the Credential type. ****

Synchronizing and Managing Registered AWS Cloud Provider

1. Navigate to the Cloud Provider menu from the Database settings menu.
2. Click on the registered Cloud Provider to enter the detailed information screen.
3. Click the Synchronize button in the top right to synchronize resources from AWS.
4. You can check the synchronization progress in the displayed Synchronization Log, and also check the synchronization history in the Administrator > General > Systems > Jobs menu.
5. Once a Cloud Provider is registered, the Provider basic information and authentication information cannot be changed.
   1. Name: Changeable
   2. Cloud Provider: Not changeable
   3. Region: Not changeable
   4. Credential: Not changeable
      1. “Save Credential for Synchronization” : Can be changed from disabled to enabled, but cannot be changed from enabled to disabled
   5. Role ARN: Not changeable
   6. Database Type Filter: Changeable
   7. Replication Frequency: Changeable

Synchronizable Resource Items

• Amazon RDS (MySQL, MariaDB, PostgreSQL, SQL Server, Oracle), DynamoDB, Redshift, DocumentDB, Athena, Redis (ElastiCache)