Skip to main content
emisar

AWS RDS operations

v0.1.12

Read-only RDS diagnostics for bounded instance, cluster, snapshot, parameter-group, pending-maintenance, and recent-event inventory. Responses are projected to operational fields and omit tags and arbitrary descriptions. Auth via AWS_PROFILE.

10 allowed by default
Pack ID
aws-rds
Vendor
emisar
OS
linux
Actions
10
Required binaries. Install these on the host before relying on the pack — an action that calls a missing one fails at run time.
aws jq

Install

emisar pack install fetches this pack, re-validates it, and verifies its content hash against the --hash below — the exact bytes this page was rendered against, so a tampered copy is rejected — before copying it into the runner's packs dir. The command reloads a running daemon itself; no manual restart.

on the runner host 
sudo emisar pack install aws-rds --hash sha256:d8670c10527f17ea0d493bb0aa2392e5dc431b59281299a70c50f007884fccd6

Setup

Drives the aws CLI on the runner host. It resolves credentials and region from its own environment or ~/.aws config — the runner only forwards the variables you allowlist in inherit_env .

Environment

Set these on the runner host, then add each name to execution.inherit_env so the value reaches the action.

  • AWS_PROFILE

    Named profile in ~/.aws/config and ~/.aws/credentials . Omit to use the default profile or static-key/instance-role auth.

  • AWS_REGION required

    Region to operate in; RDS is regional, so calls fail without it.

  • AWS_ACCESS_KEY_ID

    Static access key. Use instead of a profile; pair with AWS_SECRET_ACCESS_KEY .

  • AWS_SECRET_ACCESS_KEY

    Secret for AWS_ACCESS_KEY_ID .

  • AWS_SESSION_TOKEN

    Session token for temporary (STS) credentials.

Notes

  • An EC2 instance role or ECS task role needs no key at all and is the shape to prefer; a static pair is minted from the IAM users console → the user → Security credentials → Create access key.
  • Actions need only the corresponding rds:Describe* permissions and never mutate RDS resources.
  • Alternative to env keys: an ~/.aws/credentials profile (read from disk, no inherit_env entry) or, on EC2/ECS, the instance/task role from instance metadata (no credentials needed at all).
  • List actions return a next_page_cursor ; feed it back as page_cursor for explicit bounded pagination.
  • This remote-target pack declares no host detection signal and is never auto-suggested merely because aws is installed.

Verify it works

Runs rds.list_instances, a low-risk read that confirms the pack can reach its target. Run it on the host once the pack is installed; pack install runs it for you.

on the runner host 
sudo emisar pack verify aws-rds

Install and configure a pack walks through the whole sequence on a host.

Actions 10 total

View on GitHub
  • rds.cluster_parameter_groups script low Low — read-only or trivially reversible

    aws rds describe-db-cluster-parameter-groups

    List a bounded page of cluster parameter-group names, families, and ARNs without arbitrary descriptions.

    View source on GitHub
  • rds.describe_cluster script low Low — read-only or trivially reversible

    aws rds describe-db-clusters --db-cluster-identifier

    Show one Aurora or Multi-AZ cluster's members, endpoints, backup, network, and encryption state.

    View source on GitHub
  • rds.describe_instance script low Low — read-only or trivially reversible

    aws rds describe-db-instances --db-instance-identifier

    Show one RDS instance's availability, network, storage, backup, maintenance, and encryption state.

    View source on GitHub
  • rds.list_cluster_snapshots script low Low — read-only or trivially reversible

    aws rds describe-db-cluster-snapshots

    List a bounded page of RDS cluster snapshots with source, status, engine, capacity, and encryption state.

    View source on GitHub
  • rds.list_clusters script low Low — read-only or trivially reversible

    aws rds describe-db-clusters

    List a bounded page of Aurora and Multi-AZ clusters with members, endpoints, backup, network, and encryption state.

    View source on GitHub
  • rds.list_instances script low Low — read-only or trivially reversible

    aws rds describe-db-instances

    List a bounded page of RDS instances with availability, network, storage, backup, maintenance, and encryption state.

    View source on GitHub
  • rds.list_snapshots script low Low — read-only or trivially reversible

    aws rds describe-db-snapshots

    List a bounded page of RDS instance snapshots with source, status, engine, capacity, and encryption state.

    View source on GitHub
  • rds.parameter_groups script low Low — read-only or trivially reversible

    aws rds describe-db-parameter-groups

    List a bounded page of instance parameter-group names, families, and ARNs without arbitrary descriptions.

    View source on GitHub
  • rds.pending_maintenance script low Low — read-only or trivially reversible

    aws rds describe-pending-maintenance-actions

    List a bounded page of pending RDS maintenance with automatic, forced, and current apply dates.

    View source on GitHub
  • rds.recent_events script low Low — read-only or trivially reversible

    aws rds describe-events

    List a bounded page of recent RDS events across instances, clusters, snapshots, and parameter groups.

    View source on GitHub
← Back to registry
Pack reference  Publish your own