在 Amazon RDS 中使用 Amazon Resource Name (ARN) - Amazon Aurora
构建 ARN获取现有 ARN

在 Amazon RDS 中使用 Amazon Resource Name (ARN)

Amazon Web Services 中创建的资源分别使用 Amazon Resource Name (ARN) 进行唯一标识。对于某些 Amazon RDS 操作，您必须通过指定 Amazon RDS 资源的 ARN 来唯一标识该资源。例如，当您创建 RDS 数据库实例只读副本时，必须提供源数据库实例的 ARN。

构建 Amazon RDS 的 ARN

Amazon Web Services 中创建的资源分别使用 Amazon Resource Name (ARN) 进行唯一标识。您可以使用以下语法为 Amazon RDS 资源构建 ARN。

arn:aws:rds:<region>:<account number>:<resourcetype>:<name>

区域名称 区域 端点 协议
美国东部（俄亥俄州） us-east-2

rds.us-east-2.amazonaws.com

rds-fips.us-east-2.api.aws

rds.us-east-2.api.aws

rds-fips.us-east-2.amazonaws.com

HTTPS

HTTPS

HTTPS

HTTPS
美国东部（弗吉尼亚州北部） us-east-1

rds.us-east-1.amazonaws.com

rds-fips.us-east-1.api.aws

rds-fips.us-east-1.amazonaws.com

rds.us-east-1.api.aws

HTTPS

HTTPS

HTTPS

HTTPS
美国西部（加利福尼亚北部） us-west-1

rds.us-west-1.amazonaws.com

rds.us-west-1.api.aws

rds-fips.us-west-1.amazonaws.com

rds-fips.us-west-1.api.aws

HTTPS

HTTPS

HTTPS

HTTPS
美国西部（俄勒冈州） us-west-2

rds.us-west-2.amazonaws.com

rds-fips.us-west-2.amazonaws.com

rds.us-west-2.api.aws

rds-fips.us-west-2.api.aws

HTTPS

HTTPS

HTTPS

HTTPS
非洲（开普敦） af-south-1

rds.af-south-1.amazonaws.com

rds.af-south-1.api.aws

HTTPS

HTTPS
亚太地区（香港） ap-east-1

rds.ap-east-1.amazonaws.com

rds.ap-east-1.api.aws

HTTPS

HTTPS
亚太地区（海得拉巴） ap-south-2

rds.ap-south-2.amazonaws.com

rds.ap-south-2.api.aws

HTTPS

HTTPS
亚太地区（雅加达） ap-southeast-3

rds.ap-southeast-3.amazonaws.com

rds.ap-southeast-3.api.aws

HTTPS

HTTPS
亚太地区（墨尔本） ap-southeast-4

rds.ap-southeast-4.amazonaws.com

rds.ap-southeast-4.api.aws

HTTPS

HTTPS
亚太地区（孟买） ap-south-1

rds.ap-south-1.amazonaws.com

rds.ap-south-1.api.aws

HTTPS

HTTPS
亚太地区（大阪） ap-northeast-3

rds.ap-northeast-3.amazonaws.com

rds.ap-northeast-3.api.aws

HTTPS

HTTPS
亚太地区（首尔） ap-northeast-2

rds.ap-northeast-2.amazonaws.com

rds.ap-northeast-2.api.aws

HTTPS

HTTPS
亚太地区（新加坡） ap-southeast-1

rds.ap-southeast-1.amazonaws.com

rds.ap-southeast-1.api.aws

HTTPS

HTTPS
亚太地区（悉尼） ap-southeast-2

rds.ap-southeast-2.amazonaws.com

rds.ap-southeast-2.api.aws

HTTPS

HTTPS
亚太地区（东京) ap-northeast-1

rds.ap-northeast-1.amazonaws.com

rds.ap-northeast-1.api.aws

HTTPS

HTTPS
加拿大（中部） ca-central-1

rds.ca-central-1.amazonaws.com

rds.ca-central-1.api.aws

rds-fips.ca-central-1.api.aws

rds-fips.ca-central-1.amazonaws.com

HTTPS

HTTPS

HTTPS

HTTPS
欧洲（法兰克福） eu-central-1

rds.eu-central-1.amazonaws.com

rds.eu-central-1.api.aws

HTTPS

HTTPS
欧洲（爱尔兰） eu-west-1

rds.eu-west-1.amazonaws.com

rds.eu-west-1.api.aws

HTTPS

HTTPS
欧洲（伦敦） eu-west-2

rds.eu-west-2.amazonaws.com

rds.eu-west-2.api.aws

HTTPS

HTTPS
欧洲（米兰） eu-south-1

rds.eu-south-1.amazonaws.com

rds.eu-south-1.api.aws

HTTPS

HTTPS
欧洲（巴黎） eu-west-3

rds.eu-west-3.amazonaws.com

rds.eu-west-3.api.aws

HTTPS

HTTPS
欧洲（西班牙） eu-south-2

rds.eu-south-2.amazonaws.com

rds.eu-south-2.api.aws

HTTPS

HTTPS
欧洲（斯德哥尔摩） eu-north-1

rds.eu-north-1.amazonaws.com

rds.eu-north-1.api.aws

HTTPS

HTTPS
欧洲（苏黎世） eu-central-2

rds.eu-central-2.amazonaws.com

rds.eu-central-2.api.aws

HTTPS

HTTPS
以色列（特拉维夫） il-central-1

rds.il-central-1.amazonaws.com

rds.il-central-1.api.aws

HTTPS

HTTPS
中东（巴林） me-south-1

rds.me-south-1.amazonaws.com

rds.me-south-1.api.aws

HTTPS

HTTPS
中东（阿联酋） me-central-1

rds.me-central-1.amazonaws.com

rds.me-central-1.api.aws

HTTPS

HTTPS
南美洲（圣保罗） sa-east-1

rds.sa-east-1.amazonaws.com

rds.sa-east-1.api.aws

HTTPS

HTTPS
AWS GovCloud（美国东部） us-gov-east-1

rds.us-gov-east-1.amazonaws.com

rds.us-gov-east-1.api.aws

HTTPS

HTTPS
AWS GovCloud（美国西部） us-gov-west-1

rds.us-gov-west-1.amazonaws.com

rds.us-gov-west-1.api.aws

HTTPS

HTTPS

下表显示在构建特定 Amazon RDS 资源类型的 ARN 时应使用的格式。

资源类型 ARN 格式
数据库实例

arn:aws:rds:<region>:<account>:db:<name>

例如：

arn:aws:rds:us-east-2:123456789012:db:my-mysql-instance-1

数据库群集

arn:aws:rds:<region>:<account>:cluster:<name>

例如：

arn:aws:rds:us-east-2:123456789012:cluster:my-aurora-cluster-1
事件订阅

arn:aws:rds:<region>:<account>:es:<name>

例如：

arn:aws:rds:us-east-2:123456789012:es:my-subscription
数据库参数组

arn:aws:rds:<region>:<account>:pg:<name>

例如：

arn:aws:rds:us-east-2:123456789012:pg:my-param-enable-logs
数据库集群参数组

arn:aws:rds:<region>:<account>:cluster-pg:<name>

例如：

arn:aws:rds:us-east-2:123456789012:cluster-pg:my-cluster-param-timezone
预留数据库实例

arn:aws:rds:<region>:<account>:ri:<name>

例如：

arn:aws:rds:us-east-2:123456789012:ri:my-reserved-postgresql
数据库安全组

arn:aws:rds:<region>:<account>:secgrp:<name>

例如：

arn:aws:rds:us-east-2:123456789012:secgrp:my-public
自动数据库快照

arn:aws:rds:<region>:<account>:snapshot:rds:<name>

例如：

arn:aws:rds:us-east-2:123456789012:snapshot:rds:my-mysql-db-2019-07-22-07-23
自动数据库集群快照

arn:aws:rds:<region>:<account>:cluster-snapshot:rds:<name>

例如：

arn:aws:rds:us-east-2:123456789012:cluster-snapshot:rds:my-aurora-cluster-2019-07-22-16-16
手动数据库快照

arn:aws:rds:<region>:<account>:snapshot:<name>

例如：

arn:aws:rds:us-east-2:123456789012:snapshot:my-mysql-db-snap
手动数据库集群快照

arn:aws:rds:<region>:<account>:cluster-snapshot:<name>

例如：

arn:aws:rds:us-east-2:123456789012:cluster-snapshot:my-aurora-cluster-snap
数据库子网组

arn:aws:rds:<region>:<account>:subgrp:<name>

例如：

arn:aws:rds:us-east-2:123456789012:subgrp:my-subnet-10

获取现有 ARN

您可以使用 AWS Management Console、AWS Command Line Interface (AWS CLI) 或 RDS API 来获取 RDS 资源的 ARN。

控制台

要从 AWS Management Console中获取一个 ARN，请导航到要获取 ARN 的资源，然后查看该资源的详细信息。

例如，您可以从数据库集群详细信息的配置选项卡获取数据库集群的 ARN。

数据库集群 ARN。

AWS CLI

要从 AWS CLI 为特定 RDS 资源获取 ARN，请对该资源使用 describe 命令。下表显示了每个 AWS CLI 命令，以及与命令配合使用以获取 ARN 的 ARN 属性。

AWS CLI command ARN 属性
describe-event-subscriptions EventSubscriptionArn
describe-certificates CertificateArn
describe-db-parameter-groups DBParameterGroupArn
describe-db-cluster-parameter-groups DBClusterParameterGroupArn
describe-db-instances DBInstanceArn
describe-db-security-groups DBSecurityGroupArn
describe-db-snapshots DBSnapshotArn
describe-events SourceArn
describe-reserved-db-instances ReservedDBInstanceArn
describe-db-subnet-groups DBSubnetGroupArn
describe-db-clusters DBClusterArn
describe-db-cluster-snapshots DBClusterSnapshotArn

例如，以下 AWS CLI 命令获取数据库实例的 ARN。

例

对于 Linux、macOS 或 Unix：

aws rds describe-db-instances \
--db-instance-identifier DBInstanceIdentifier \
--region us-west-2 \
--query "*[].{DBInstanceIdentifier:DBInstanceIdentifier,DBInstanceArn:DBInstanceArn}"

对于 Windows：

aws rds describe-db-instances ^
--db-instance-identifier DBInstanceIdentifier ^
--region us-west-2 ^
--query "*[].{DBInstanceIdentifier:DBInstanceIdentifier,DBInstanceArn:DBInstanceArn}"

该命令的输出如下所示：


[
    {
        "DBInstanceArn": "arn:aws:rds:us-west-2:account_id:db:instance_id", 
        "DBInstanceIdentifier": "instance_id"
    }
]

RDS API

要为特定 RDS 资源获取 ARN，您可以调用以下 RDS API 操作并使用如下所示的 ARN 属性。

RDS API 操作 ARN 属性
DescribeEventSubscriptions EventSubscriptionArn
DescribeCertificates CertificateArn
DescribeDBParameterGroups DBParameterGroupArn
DescribeDBClusterParameterGroups DBClusterParameterGroupArn
DescribeDBInstances DBInstanceArn
DescribeDBSecurityGroups DBSecurityGroupArn
DescribeDBSnapshots DBSnapshotArn
DescribeEvents SourceArn
DescribeReservedDBInstances ReservedDBInstanceArn
DescribeDBSubnetGroups DBSubnetGroupArn
DescribeDBClusters DBClusterArn
DescribeDBClusterSnapshots DBClusterSnapshotArn