在 Amazon RDS 中使用 Amazon Resource Name (ARN) - Amazon Relational Database Service

本文為英文版的機器翻譯版本,如內容有任何歧義或不一致之處,概以英文版為準。

在 Amazon RDS 中使用 Amazon Resource Name (ARN)

在 Amazon Web Services 中建立的資源,都是用 Amazon 資源名稱 (ARN) 做為唯一識別符。當您在執行特定的 Amazon RDS 操作時,必須要指定可識別 Amazon RDS 資源的唯一 ARN。舉例來說,建立 RDS 資料庫執行個體僅供讀取複本時,請務必提供來源資料庫執行個體的 ARN。

建構 Amazon RDS 的 ARN

在 Amazon Web Services 中建立的資源,都是用 Amazon 資源名稱 (ARN) 做為唯一識別符。若要建構 Amazon RDS 資源的 ARN,則可使用下列語法。

arn:aws:rds:<region>:<account number>:<resourcetype>:<name>

區域名稱 區域 端點 通訊協定
美國東部 (俄亥俄) us-east-2

rds.us-east-2.amazonaws.com

rds-fips.us-east-2.api.aws

rds.us-east-2.api.aws

rds-fips.us-east-2.amazonaws.com

HTTPS

HTTPS

HTTPS

HTTPS

美國東部 (維吉尼亞北部) us-east-1

rds.us-east-1.amazonaws.com

rds-fips.us-east-1.api.aws

rds-fips.us-east-1.amazonaws.com

rds.us-east-1.api.aws

HTTPS

HTTPS

HTTPS

HTTPS

美國西部 (加利佛尼亞北部) us-west-1

rds.us-west-1.amazonaws.com

rds.us-west-1.api.aws

rds-fips.us-west-1.amazonaws.com

rds-fips.us-west-1.api.aws

HTTPS

HTTPS

HTTPS

HTTPS

美國西部 (奧勒岡) us-west-2

rds.us-west-2.amazonaws.com

rds-fips.us-west-2.amazonaws.com

rds.us-west-2.api.aws

rds-fips.us-west-2.api.aws

HTTPS

HTTPS

HTTPS

HTTPS

非洲 (開普敦) af-south-1

rds.af-south-1.amazonaws.com

rds.af-south-1.api.aws

HTTPS

HTTPS

亞太區域 (香港) ap-east-1

rds.ap-east-1.amazonaws.com

rds.ap-east-1.api.aws

HTTPS

HTTPS

亞太區域 (海德拉巴) ap-south-2

rds.ap-south-2.amazonaws.com

rds.ap-south-2.api.aws

HTTPS

HTTPS

亞太區域 (雅加達) ap-southeast-3

rds.ap-southeast-3.amazonaws.com

rds.ap-southeast-3.api.aws

HTTPS

HTTPS

亞太區域 (墨爾本) ap-southeast-4

rds.ap-southeast-4.amazonaws.com

rds.ap-southeast-4.api.aws

HTTPS

HTTPS

亞太區域 (孟買) ap-south-1

rds.ap-south-1.amazonaws.com

rds.ap-south-1.api.aws

HTTPS

HTTPS

亞太區域 (大阪) ap-northeast-3

rds.ap-northeast-3.amazonaws.com

rds.ap-northeast-3.api.aws

HTTPS

HTTPS

亞太區域 (首爾) ap-northeast-2

rds.ap-northeast-2.amazonaws.com

rds.ap-northeast-2.api.aws

HTTPS

HTTPS

亞太區域 (新加坡) ap-southeast-1

rds.ap-southeast-1.amazonaws.com

rds.ap-southeast-1.api.aws

HTTPS

HTTPS

亞太區域 (雪梨) ap-southeast-2

rds.ap-southeast-2.amazonaws.com

rds.ap-southeast-2.api.aws

HTTPS

HTTPS

亞太區域 (東京) ap-northeast-1

rds.ap-northeast-1.amazonaws.com

rds.ap-northeast-1.api.aws

HTTPS

HTTPS

加拿大 (中部) ca-central-1

rds.ca-central-1.amazonaws.com

rds.ca-central-1.api.aws

rds-fips.ca-central-1.api.aws

rds-fips.ca-central-1.amazonaws.com

HTTPS

HTTPS

HTTPS

HTTPS

加拿大西部 (卡加利) ca-west-1

rds.ca-west-1.amazonaws.com

rds-fips.ca-west-1.amazonaws.com

HTTPS

HTTPS

歐洲 (法蘭克福) eu-central-1

rds.eu-central-1.amazonaws.com

rds.eu-central-1.api.aws

HTTPS

HTTPS

歐洲 (愛爾蘭) eu-west-1

rds.eu-west-1.amazonaws.com

rds.eu-west-1.api.aws

HTTPS

HTTPS

歐洲 (倫敦) eu-west-2

rds.eu-west-2.amazonaws.com

rds.eu-west-2.api.aws

HTTPS

HTTPS

歐洲 (米蘭) eu-south-1

rds.eu-south-1.amazonaws.com

rds.eu-south-1.api.aws

HTTPS

HTTPS

歐洲 (巴黎) eu-west-3

rds.eu-west-3.amazonaws.com

rds.eu-west-3.api.aws

HTTPS

HTTPS

歐洲 (西班牙) eu-south-2

rds.eu-south-2.amazonaws.com

rds.eu-south-2.api.aws

HTTPS

HTTPS

歐洲 (斯德哥爾摩) eu-north-1

rds.eu-north-1.amazonaws.com

rds.eu-north-1.api.aws

HTTPS

HTTPS

歐洲 (蘇黎世) eu-central-2

rds.eu-central-2.amazonaws.com

rds.eu-central-2.api.aws

HTTPS

HTTPS

以色列 (特拉維夫) il-central-1

rds.il-central-1.amazonaws.com

rds.il-central-1.api.aws

HTTPS

HTTPS

中東 (巴林) me-south-1

rds.me-south-1.amazonaws.com

rds.me-south-1.api.aws

HTTPS

HTTPS

中東 (阿拉伯聯合大公國) me-central-1

rds.me-central-1.amazonaws.com

rds.me-central-1.api.aws

HTTPS

HTTPS

南美洲 (聖保羅) sa-east-1

rds.sa-east-1.amazonaws.com

rds.sa-east-1.api.aws

HTTPS

HTTPS

AWS GovCloud (美國東部) us-gov-east-1

rds.us-gov-east-1.amazonaws.com

rds.us-gov-east-1.api.aws

HTTPS

HTTPS

AWS GovCloud (美國西部) us-gov-west-1

rds.us-gov-west-1.amazonaws.com

rds.us-gov-west-1.api.aws

HTTPS

HTTPS

下表顯示您在為特定 Amazon RDS 資源類型建構 ARN 時應使用的格式。

資源類型 ARN 格式
資料庫執行個體

arn:aws:rds:<region>:<account>:db:<name>

例如:

arn:aws:rds:us-east-2:123456789012:db:my-mysql-instance-1

資料庫叢集

arn:aws:rds:<region>:<account>:cluster:<name>

例如:

arn:aws:rds:us-east-2:123456789012:cluster:my-aurora-cluster-1
事件訂閱

arn:aws:rds:<region>:<account>:es:<name>

例如:

arn:aws:rds:us-east-2:123456789012:es:my-subscription
資料庫選項群組

arn:aws:rds:<region>:<account>:og:<name>

例如:

arn:aws:rds:us-east-2:123456789012:og:my-og
DB parameter group (資料庫參數群組)

arn:aws:rds:<region>:<account>:pg:<name>

例如:

arn:aws:rds:us-east-2:123456789012:pg:my-param-enable-logs
DB cluster parameter group (資料庫叢集參數群組)

arn:aws:rds:<region>:<account>:cluster-pg:<name>

例如:

arn:aws:rds:us-east-2:123456789012:cluster-pg:my-cluster-param-timezone
預留資料庫執行個體

arn:aws:rds:<region>:<account>:ri:<name>

例如:

arn:aws:rds:us-east-2:123456789012:ri:my-reserved-postgresql
資料庫安全群組

arn:aws:rds:<region>:<account>:secgrp:<name>

例如:

arn:aws:rds:us-east-2:123456789012:secgrp:my-public
自動化的資料庫快照

arn:aws:rds:<區域><帳戶>:snapshot:rds:<名稱>

例如:

arn:aws:rds:us-east-2:123456789012:snapshot:rds:my-mysql-db-2019-07-22-07-23
自動化的資料庫叢集快照

arn:aws:rds:<區域><帳戶>:cluster-snapshot:rds:<名稱>

例如:

arn:aws:rds:us-east-2:123456789012:cluster-snapshot:rds:my-aurora-cluster-2019-07-22-16-16
手動資料庫快照

arn:aws:rds:<region>:<account>:snapshot:<name>

例如:

arn:aws:rds:us-east-2:123456789012:snapshot:my-mysql-db-snap
手動資料庫叢集快照

arn:aws:rds:<region>:<account>:cluster-snapshot:<name>

例如:

arn:aws:rds:us-east-2:123456789012:cluster-snapshot:my-aurora-cluster-snap
資料庫子網路群組

arn:aws:rds:<region>:<account>:subgrp:<name>

例如:

arn:aws:rds:us-east-2:123456789012:subgrp:my-subnet-10

取得現有的 ARN

您可以使用 AWS Management Console、 AWS Command Line Interface (AWS CLI) 或 RDS API 取得 RDS 資源的 ARN。

主控台

若要從中取得 ARN AWS Management Console,請瀏覽至您想要 ARN 的資源,然後檢視該資源的詳細資訊。

例如,您可以從資料庫執行個體詳細資訊的組態標籤取得資料庫執行個體的 ARN。

資料庫執行個體 ARN。

AWS CLI

若要從特定 RDS 資源取得 ARN,您可以使用該資源的describe命令。 AWS CLI 下表顯示了每個 AWS CLI 命令,以及用於獲取 ARN 命令的 ARN 屬性。

AWS CLI 命令 ARN 屬性
describe-event-subscriptions EventSubscriptionArn
describe-certificates CertificateArn
describe-db-parameter-groups 資料庫 ParameterGroupArn
describe-db-cluster-parameter-組 資料庫 ClusterParameterGroupArn
describe-db-instances 資料庫 InstanceArn
describe-db-security-groups 資料庫 SecurityGroupArn
describe-db-snapshots 資料庫 SnapshotArn
describe-events SourceArn
describe-reserved-db-instances 預備分享 InstanceArn
describe-db-subnet-groups 資料庫 SubnetGroupArn
describe-option-groups OptionGroupArn
describe-db-clusters 資料庫 ClusterArn
describe-db-cluster-snapshots 資料庫 ClusterSnapshotArn

例如,下列 AWS CLI 命令會取得資料庫執行個體的 ARN。

範例

對於LinuxmacOS、或Unix:

aws rds describe-db-instances \ --db-instance-identifier DBInstanceIdentifier \ --region us-west-2 \ --query "*[].{DBInstanceIdentifier:DBInstanceIdentifier,DBInstanceArn:DBInstanceArn}"

在 Windows 中:

aws rds describe-db-instances ^ --db-instance-identifier DBInstanceIdentifier ^ --region us-west-2 ^ --query "*[].{DBInstanceIdentifier:DBInstanceIdentifier,DBInstanceArn:DBInstanceArn}"

該命令的輸出與以下內容相似:

[ { "DBInstanceArn": "arn:aws:rds:us-west-2:account_id:db:instance_id", "DBInstanceIdentifier": "instance_id" } ]

RDS API

若要取得特定 RDS 資源的 ARN,則可呼叫下列 RDS API 操作,並搭配使用下方所示的 ARN 屬性。

RDS API 操作 ARN 屬性
DescribeEventSubscriptions EventSubscriptionArn
DescribeCertificates CertificateArn
描述 B ParameterGroups 資料庫 ParameterGroupArn
描述 B ClusterParameterGroups 資料庫 ClusterParameterGroupArn
DescribeDBInstances 資料庫 InstanceArn
描述 B SecurityGroups 資料庫 SecurityGroupArn
DescribeDBSnapshots 資料庫 SnapshotArn
DescribeEvents SourceArn
DescribeReserved數據庫實例 預備分享 InstanceArn
描述 B SubnetGroups 資料庫 SubnetGroupArn
DescribeOptionGroups OptionGroupArn
DescribeDBClusters 資料庫 ClusterArn
描述 B ClusterSnapshots 資料庫 ClusterSnapshotArn