Using the Amazon RDS Data API
By using RDS Data API (Data API), you can work with a web-services interface to your Aurora DB cluster. Data API doesn't require a persistent connection to the DB cluster. Instead, it provides a secure HTTP endpoint and integration with Amazon SDKs. You can use the endpoint to run SQL statements without managing connections.
Users don't need to pass credentials with calls to Data API, because Data API uses database credentials stored in Amazon Secrets Manager. To store credentials in Secrets Manager, users must be granted the appropriate permissions to use Secrets Manager, and also Data API. For more information about authorizing users, see Authorizing access to the Amazon RDS Data API.
You can also use Data API to integrate Amazon Aurora with other Amazon applications such as
Amazon Lambda, Amazon AppSync, and Amazon Cloud9.
Data API provides a more secure way to use Amazon Lambda. It enables you to access your DB
cluster without your needing to configure a Lambda function to access resources in a virtual
private cloud (VPC). For more information, see Amazon Lambda
You can enable Data API when you create the Aurora DB cluster. You can also modify the configuration later. For more information, see Enabling the Amazon RDS Data API.
After you enable Data API, you can also use the query editor to run ad hoc queries without configuring a query tool to access Aurora in a VPC. For more information, see Using the Aurora query editor.