Using Amazon Aurora global databases with other Amazon services
You can use your Aurora global databases with other Amazon services, such as Amazon S3 and Amazon Lambda. Doing so requires that all Aurora DB clusters in your global database have the same privileges, external functions, and so on in the respective Amazon Web Services Regions. Because a read-only Aurora secondary DB cluster in an Aurora global database can be promoted to the role of primary, we recommend that you set up write privileges ahead of time, on all Aurora DB clusters for any services you plan to use with your Aurora global database.
The following procedures summarize the actions to take for each Amazon Web Services service.
To invoke Amazon Lambda functions from an Aurora global database
-
For all the Aurora clusters that make up the Aurora global database, perform the procedures in Invoking a Lambda function from an Amazon Aurora MySQL DB cluster or Invoking an Amazon Lambda function from an Aurora PostgreSQL DB cluster.
For each cluster in the Aurora global database, set the (ARN) of the new IAM (IAM) role.
To permit database users in an Aurora global database to invoke Lambda functions, associate the role that you created in Creating an IAM role to allow Amazon Aurora to access Amazon services with each cluster in the Aurora global database.
Configure each cluster in the Aurora global database to allow outbound connections to Lambda. For instructions, see Enabling network communication from Amazon Aurora to other Amazon services.
To load data from Amazon S3
-
For all the Aurora clusters that make up the Aurora global database, perform the procedures in Loading data into an Amazon Aurora MySQL DB cluster from text files in an Amazon S3 bucket or Importing data from Amazon S3 into an Aurora PostgreSQL DB cluster.
For each Aurora cluster in the global database, set either the
aurora_load_from_s3_role
oraws_default_s3_role
DB cluster parameter to the Amazon Resource Name (ARN) of the new IAM role. If an IAM role isn't specified foraurora_load_from_s3_role
, Aurora uses the IAM role specified inaws_default_s3_role
.To permit database users in an Aurora global database to access S3, associate the role that you created in Creating an IAM role to allow Amazon Aurora to access Amazon services with each Aurora cluster in the global database.
-
Configure each Aurora cluster in the global database to allow outbound connections to S3. For instructions, see Enabling network communication from Amazon Aurora to other Amazon services.
To save queried data to Amazon S3
-
For all the Aurora clusters that make up the Aurora global database, perform the procedures in Saving data from an Amazon Aurora MySQL DB cluster into text files in an Amazon S3 bucket or Exporting data from an Aurora PostgreSQL DB cluster to Amazon S3.
For each Aurora cluster in the global database, set either the
aurora_select_into_s3_role
oraws_default_s3_role
DB cluster parameter to the Amazon Resource Name (ARN) of the new IAM role. If an IAM role isn't specified foraurora_select_into_s3_role
, Aurora uses the IAM role specified inaws_default_s3_role
.To permit database users in an Aurora global database to access S3, associate the role that you created in Creating an IAM role to allow Amazon Aurora to access Amazon services with each Aurora cluster in the global database.
Configure each Aurora cluster in the global database to allow outbound connections to S3. For instructions, see Enabling network communication from Amazon Aurora to other Amazon services.