Connecting to Amazon Web Services (AWS) by manually adding a stream

If you are unable to discover streams automatically after connecting to AWS, you can add streams manually.

Before you begin

Make sure that Guardium® Insights supports your data source. For more information, see Version 3.4.x and later Data source platform streaming support or Version 3.3.xData source platform streaming support.

After initiating the connection to your AWS data source, configure the connection to AWS as follows:

Procedure

Required: Set the AWS credentials to use for the connection:
1. To set up a new connection, ensure that Connect an account is active and provide the following information:
  1. Create a name for your account: This unique name (with a minimum of 4 characters) is used to identify your account in the future.
  2. Add your access information:
    1. To authenticate with security credentials, select Security-Credentials. If you also use an IAM-Role for authentication, select IAM-Role.
    2. AWS access key: Enter your AWS access key.
    3. AWS secret access key: Enter your AWS secret access key.
    4. Role ARN: This field is only available if you selected IAM-Role. Enter your Role ARN in this field.
2. To reuse an existing connection, click Use existing account and then select the account that you want to use.
Click Next to open the Add stream details page.
Required: Add the information for a specific stream:
1. Stream name: Enter the name of the stream to connect to.
2. Region: Select the region in which the selected stream is located.
3. Port: Specify the database port number.
4. Cluster resource ID: The cluster resource ID for the AWS RDS cluster associated with the stream. If you enter an invalid or unknown cluster resource ID, an error is reported in the status for the stream.
5. Consumer group name: Determines whether multiple consumers have a shared or separate view of this data stream. To share the data stream view, use the same consumer group name. The consumer group name can be any name that is unique.
6. Database DNS endpoint: Specify the database DNS endpoint (host).
7. Database type: Choose the database type to connect to.
Click Next.
Optional: To be able to complete actions such as blocking, complete the Add database credentials page:
1. Database name: Enter the database name.
2. Database host: Enter the database host.
3. Username and Password: Enter your database user credentials.
Important: Blocking users is supported on AWS PostgreSQL, but not AWS Aurora. If you connect to AWS Aurora, do not change the default values.
Click Connect and finish.

What to do next

After you add a data source, it is scanned almost immediately. You manage your connections and connection credentials from the Connections page.

To delete a connection, click the connection checkbox and then click Remove in the banner that opens. You can select multiple connections to remove.
To edit a connection, select its Connection name link in the table. A window opens from which you can Enable or Disable the connection. In addition, you can see the status of the connection or click to change the configuration for that connection. When you are done, click Save to save your changes and rescan the connection.
To download a CSV list of the connections in the table, click . A list of the connections currently in the table is exported - it does not include any that are filtered out.
To refresh the list of connections, click Refresh.
You can filter connections by opening the Filter window (select the filter criteria and then click Apply filters).
To customize the columns in the table, click Customize columns. Then, under Customize columns, select the columns that you want to display in the table - and drag the columns to reorder them. Click Done when you finish.