rds_skill

Overview

This skill provides actionable tooling and reference for managing Amazon RDS relational databases. It covers provisioning, backups, replicas, connectivity checks, performance tuning, and common operational tasks across engines like PostgreSQL, MySQL, Aurora, and others. Use it to automate routine RDS operations and troubleshoot production issues quickly.

How this skill works

The skill exposes common CLI and boto3 patterns to create, modify, snapshot, restore, and scale RDS instances and read replicas. It includes commands and code snippets for network and security setup, IAM authentication, monitoring, and recovery flows. It also codifies troubleshooting steps for connectivity, CPU/memory pressure, storage, and replication lag so an agent can run diagnostics and apply recommended fixes.

When to use it

• Provision new production or development databases with correct networking and security
• Configure backups, snapshots, and point-in-time recovery for disaster recovery
• Create and manage read replicas for read-scaling or cross-region replication
• Troubleshoot connectivity, authorization, or endpoint issues from application hosts
• Optimize performance: right-size instances, enable Performance Insights, tune storage
• Automate routine maintenance: patching, scaling, and snapshot lifecycle management

Best practices

• Keep instances private in a VPC and restrict access with security groups
• Enable encryption at rest (KMS) and enforce SSL/TLS in transit
• Store DB credentials in Secrets Manager and prefer IAM DB authentication for apps
• Enable Multi-AZ for high availability and test failover regularly
• Use gp3 storage for balanced cost/performance and enable storage autoscaling
• Monitor with Performance Insights and CloudWatch; set alarms for storage, CPU, and replica lag

Example use cases

• Create a PostgreSQL instance with secure subnet group, security group, encryption, and automated backups
• Promote a read replica to standalone after failover or planned migration
• Restore a production instance from a manual snapshot or perform point-in-time recovery
• Scale an instance class or increase storage with minimal downtime using modify-db-instance
• Run connectivity diagnostics from an EC2 host, check security groups, and validate SSL requirements
• Set up CloudWatch alarms and automated snapshot cleanup to control costs