本文属于机器翻译版本。若本译文内容与英语原文存在差异,则一律以英文原文为准。
AWSConfigRemediation-EnableRDSInstanceDeletionProtection
描述
The AWSConfigRemediation-EnableRDSInstanceDeletionProtection Automation document enables deletion protection on the Amazon RDS database instance you specify.
文档类型
Automation
所有者
Amazon
平台
数据库
参数
-
ApplyImmediately
类型: Boolean
默认值:false
描述:(Optional) If you specify
true
for this parameter, the modifications in this request and any pending modifications are asynchronously applied as soon as possible, regardless of thePreferredMaintenanceWindow
setting for the DB instance. -
AutomationAssumeRole
类型:字符串
说明:(必需)允许 Systems Manager Automation 代表您执行操作的 AWS Identity and Access Management (IAM) 角色的 Amazon 资源名称 (ARN)。
-
DbInstanceResourceId
类型: 字符串
描述:(Required) The resource identifier for the DB instance you want to enable deletion protection on.
所需的 IAM 权限
AutomationAssumeRole
需要执行以下操作才能成功运行 Automation 文档。
-
ssm:ExecuteAutomation
-
ssm:GetAutomationExecution
-
rds:DescribeDBInstances
-
rds:ModifyDBInstance
文档步骤
-
aws:executeAwsApi - Gathers the DB instance identifier from the DB instance resource identifier.
-
aws:executeAwsApi - Enables deletion protection on your DB instance.
-
aws:assertAwsResourceProperty - Confirms deletion protection is enabled on the DB instance.