在 Amazon RDS 中使用 Amazon Resource Name (ARN)

Amazon Web Services 中创建的资源分别使用 Amazon Resource Name (ARN) 进行唯一标识。对于某些 Amazon RDS 操作，您必须通过指定 Amazon RDS 资源的 ARN 来唯一标识该资源。例如，当您创建 RDS 数据库实例只读副本时，必须提供源数据库实例的 ARN。

构建 Amazon RDS 的 ARN

Amazon Web Services 中创建的资源分别使用 Amazon Resource Name (ARN) 进行唯一标识。您可以使用以下语法为 Amazon RDS 资源构建 ARN。

arn:aws:rds:<region>:<account number>:<resourcetype>:<name>

区域名称	区域	端点	协议
美国东部（俄亥俄州）	us-east-2	rds.us-east-2.amazonaws.com rds-fips.us-east-2.api.aws rds.us-east-2.api.aws rds-fips.us-east-2.amazonaws.com	HTTPS HTTPS HTTPS HTTPS
美国东部（弗吉尼亚州北部）	us-east-1	rds.us-east-1.amazonaws.com rds-fips.us-east-1.api.aws rds-fips.us-east-1.amazonaws.com rds.us-east-1.api.aws	HTTPS HTTPS HTTPS HTTPS
美国西部（北加利福尼亚）	us-west-1	rds.us-west-1.amazonaws.com rds.us-west-1.api.aws rds-fips.us-west-1.amazonaws.com rds-fips.us-west-1.api.aws	HTTPS HTTPS HTTPS HTTPS
美国西部（俄勒冈州）	us-west-2	rds.us-west-2.amazonaws.com rds-fips.us-west-2.amazonaws.com rds.us-west-2.api.aws rds-fips.us-west-2.api.aws	HTTPS HTTPS HTTPS HTTPS
非洲（开普敦）	af-south-1	rds.af-south-1.amazonaws.com rds.af-south-1.api.aws	HTTPS HTTPS
亚太地区（香港）	ap-east-1	rds.ap-east-1.amazonaws.com rds.ap-east-1.api.aws	HTTPS HTTPS
亚太地区（海得拉巴）	ap-south-2	rds.ap-south-2.amazonaws.com rds.ap-south-2.api.aws	HTTPS HTTPS
亚太地区（雅加达）	ap-southeast-3	rds.ap-southeast-3.amazonaws.com rds.ap-southeast-3.api.aws	HTTPS HTTPS
亚太地区（墨尔本）	ap-southeast-4	rds.ap-southeast-4.amazonaws.com rds.ap-southeast-4.api.aws	HTTPS HTTPS
亚太地区（孟买）	ap-south-1	rds.ap-south-1.amazonaws.com rds.ap-south-1.api.aws	HTTPS HTTPS
亚太地区（大阪）	ap-northeast-3	rds.ap-northeast-3.amazonaws.com rds.ap-northeast-3.api.aws	HTTPS HTTPS
亚太地区（首尔）	ap-northeast-2	rds.ap-northeast-2.amazonaws.com rds.ap-northeast-2.api.aws	HTTPS HTTPS
亚太地区（新加坡）	ap-southeast-1	rds.ap-southeast-1.amazonaws.com rds.ap-southeast-1.api.aws	HTTPS HTTPS
亚太地区（悉尼）	ap-southeast-2	rds.ap-southeast-2.amazonaws.com rds.ap-southeast-2.api.aws	HTTPS HTTPS
亚太地区（东京）	ap-northeast-1	rds.ap-northeast-1.amazonaws.com rds.ap-northeast-1.api.aws	HTTPS HTTPS
加拿大（中部）	ca-central-1	rds.ca-central-1.amazonaws.com rds.ca-central-1.api.aws rds-fips.ca-central-1.api.aws rds-fips.ca-central-1.amazonaws.com	HTTPS HTTPS HTTPS HTTPS
加拿大西部（卡尔加里）	ca-west-1	rds.ca-west-1.amazonaws.com rds-fips.ca-west-1.amazonaws.com	HTTPS HTTPS
中国（北京）	cn-north-1	rds.cn-north-1.amazonaws.com.cn rds.cn-north-1.api.amazonwebservices.com.cn	HTTPS HTTPS
中国（宁夏）	cn-northwest-1	rds.cn-northwest-1.amazonaws.com.cn rds.cn-northwest-1.api.amazonwebservices.com.cn	HTTPS HTTPS
欧洲地区（法兰克福）	eu-central-1	rds.eu-central-1.amazonaws.com rds.eu-central-1.api.aws	HTTPS HTTPS
欧洲地区（爱尔兰）	eu-west-1	rds.eu-west-1.amazonaws.com rds.eu-west-1.api.aws	HTTPS HTTPS
欧洲地区（伦敦）	eu-west-2	rds.eu-west-2.amazonaws.com rds.eu-west-2.api.aws	HTTPS HTTPS
欧洲地区（米兰）	eu-south-1	rds.eu-south-1.amazonaws.com rds.eu-south-1.api.aws	HTTPS HTTPS
欧洲地区（巴黎）	eu-west-3	rds.eu-west-3.amazonaws.com rds.eu-west-3.api.aws	HTTPS HTTPS
欧洲（西班牙）	eu-south-2	rds.eu-south-2.amazonaws.com rds.eu-south-2.api.aws	HTTPS HTTPS
欧洲地区（斯德哥尔摩）	eu-north-1	rds.eu-north-1.amazonaws.com rds.eu-north-1.api.aws	HTTPS HTTPS
欧洲（苏黎世）	eu-central-2	rds.eu-central-2.amazonaws.com rds.eu-central-2.api.aws	HTTPS HTTPS
以色列（特拉维夫）	il-central-1	rds.il-central-1.amazonaws.com rds.il-central-1.api.aws	HTTPS HTTPS
中东（巴林）	me-south-1	rds.me-south-1.amazonaws.com rds.me-south-1.api.aws	HTTPS HTTPS
中东（阿联酋）	me-central-1	rds.me-central-1.amazonaws.com rds.me-central-1.api.aws	HTTPS HTTPS
南美洲（圣保罗）	sa-east-1	rds.sa-east-1.amazonaws.com rds.sa-east-1.api.aws	HTTPS HTTPS

下表显示在构建特定 Amazon RDS 资源类型的 ARN 时应使用的格式。

资源类型	ARN 格式
数据库实例	arn:aws:rds:`<region>`:`<account>`:db:`<name>` 例如： `arn:aws:rds:us-east-2:123456789012:db:my-mysql-instance-1`
数据库群集	arn:aws:rds:`<region>`:`<account>`:cluster:`<name>` 例如： `arn:aws:rds:us-east-2:123456789012:cluster:my-aurora-cluster-1`
事件订阅	arn:aws:rds:`<region>`:`<account>`:es:`<name>` 例如： `arn:aws:rds:us-east-2:123456789012:es:my-subscription`
数据库参数组	arn:aws:rds:`<region>`:`<account>`:pg:`<name>` 例如： `arn:aws:rds:us-east-2:123456789012:pg:my-param-enable-logs`
数据库集群参数组	arn:aws:rds:`<region>`:`<account>`:cluster-pg:`<name>` 例如： `arn:aws:rds:us-east-2:123456789012:cluster-pg:my-cluster-param-timezone`
预留数据库实例	arn:aws:rds:`<region>`:`<account>`:ri:`<name>` 例如： `arn:aws:rds:us-east-2:123456789012:ri:my-reserved-postgresql`
数据库安全组	arn:aws:rds:`<region>`:`<account>`:secgrp:`<name>` 例如： `arn:aws:rds:us-east-2:123456789012:secgrp:my-public`
自动数据库快照	arn:aws:rds:`<region>`:`<account>`:snapshot:rds:`<name>` 例如： `arn:aws:rds:us-east-2:123456789012:snapshot:rds:my-mysql-db-2019-07-22-07-23`
自动数据库集群快照	arn:aws:rds:`<region>`:`<account>`:cluster-snapshot:rds:`<name>` 例如： `arn:aws:rds:us-east-2:123456789012:cluster-snapshot:rds:my-aurora-cluster-2019-07-22-16-16`
手动数据库快照	arn:aws:rds:`<region>`:`<account>`:snapshot:`<name>` 例如： `arn:aws:rds:us-east-2:123456789012:snapshot:my-mysql-db-snap`
手动数据库集群快照	arn:aws:rds:`<region>`:`<account>`:cluster-snapshot:`<name>` 例如： `arn:aws:rds:us-east-2:123456789012:cluster-snapshot:my-aurora-cluster-snap`
数据库子网组	arn:aws:rds:`<region>`:`<account>`:subgrp:`<name>` 例如： `arn:aws:rds:us-east-2:123456789012:subgrp:my-subnet-10`

获取现有 ARN

您可以使用 Amazon Web Services Management Console、Amazon Command Line Interface (Amazon CLI) 或 RDS API 来获取 RDS 资源的 ARN。

控制台

要从 Amazon Web Services Management Console中获取一个 ARN，请导航到要获取 ARN 的资源，然后查看该资源的详细信息。

例如，您可以从数据库集群详细信息的配置选项卡获取数据库集群的 ARN。

Amazon CLI

要从 Amazon CLI 为特定 RDS 资源获取 ARN，请对该资源使用 describe 命令。下表显示了每个 Amazon CLI 命令，以及与命令配合使用以获取 ARN 的 ARN 属性。

Amazon CLI command	ARN 属性
describe-event-subscriptions	EventSubscriptionArn
describe-certificates	CertificateArn
describe-db-parameter-groups	DBParameterGroupArn
describe-db-cluster-parameter-groups	DBClusterParameterGroupArn
describe-db-instances	DBInstanceArn
describe-db-security-groups	DBSecurityGroupArn
describe-db-snapshots	DBSnapshotArn
describe-events	SourceArn
describe-reserved-db-instances	ReservedDBInstanceArn
describe-db-subnet-groups	DBSubnetGroupArn
describe-db-clusters	DBClusterArn
describe-db-cluster-snapshots	DBClusterSnapshotArn

例如，以下 Amazon CLI 命令获取数据库实例的 ARN。

例

对于 Linux、macOS 或 Unix：


aws rds describe-db-instances \
--db-instance-identifier DBInstanceIdentifier \
--region us-west-2 \
--query "*[].{DBInstanceIdentifier:DBInstanceIdentifier,DBInstanceArn:DBInstanceArn}"

对于 Windows：


aws rds describe-db-instances ^
--db-instance-identifier DBInstanceIdentifier ^
--region us-west-2 ^
--query "*[].{DBInstanceIdentifier:DBInstanceIdentifier,DBInstanceArn:DBInstanceArn}"

该命令的输出如下所示：



[
    {
        "DBInstanceArn": "arn:aws:rds:us-west-2:account_id:db:instance_id", 
        "DBInstanceIdentifier": "instance_id"
    }
]

RDS API

要为特定 RDS 资源获取 ARN，您可以调用以下 RDS API 操作并使用如下所示的 ARN 属性。

RDS API 操作	ARN 属性
DescribeEventSubscriptions	EventSubscriptionArn
DescribeCertificates	CertificateArn
DescribeDBParameterGroups	DBParameterGroupArn
DescribeDBClusterParameterGroups	DBClusterParameterGroupArn
DescribeDBInstances	DBInstanceArn
DescribeDBSecurityGroups	DBSecurityGroupArn
DescribeDBSnapshots	DBSnapshotArn
DescribeEvents	SourceArn
DescribeReservedDBInstances	ReservedDBInstanceArn
DescribeDBSubnetGroups	DBSubnetGroupArn
DescribeDBClusters	DBClusterArn
DescribeDBClusterSnapshots	DBClusterSnapshotArn

Javascript 在您的浏览器中被禁用或不可用。

要使用 Amazon Web Services 文档，必须启用 Javascript。请参阅浏览器的帮助页面以了解相关说明。

为 RDS 资源添加标签

Aurora 更新