YAML for RDS_MYSQL

View as Markdown

AWS RDS for MySQL target for executing queries on an RDS-managed MySQL instance.

YAML parameters for RDS_MYSQL

PARAMETERS

integrationrequiredstring

Hash ID or identifier of an AWS integration

regionrequiredstring

AWS region of the RDS instance, e.g. us-east-1

db_instance_identifierrequiredstring

RDS DB instance identifier

hostrequiredstring

The endpoint hostname of the RDS instance

targetrequiredstring

The human-readable ID of the target

namestring

The name of the target

portstring

The port of the RDS MySQL instance. Default: 3306

databasestring

The default database name

ssl_modestring enum

SSL connection mode. Default: REQUIRE. VERIFY_FULL cannot be combined with proxy — through an SSH tunnel the client connects to 127.0.0.1, so the server certificate fails hostname validation.

Allowed enum:

DISABLE,

REQUIRE,

VERIFY_FULL

ca_certificatestring

PEM-encoded CA certificate (required when ssl_mode is VERIFY_FULL)

authMysqlAuthYaml

MySQL authentication credentials

proxystring

SSH proxy target for tunneling to RDS instances in private VPCs. Keep ssl_mode at REQUIRE (the default) — TLS still terminates on the RDS instance, so the bastion never sees the wire protocol. VERIFY_FULL is not usable together with a proxy.

permissionsPermissionsYaml

Access permissions for the target

disabledboolean

Indicates if this target is disabled (default: false)

tagsstring[]

The list of tags associated with the target

use_asUseAsYaml

Defines how the target can be used (as deployment target, proxy, or both)

notestring

Note for this resource

agent_notestring

YAML note for AI agents operating on this resource

typestring

Value: RDS_MYSQL

Last modified on Sep 28, 2026

PostgreSQL RDS_POSTGRESQL

YAML examples for RDS_MYSQL

RDS MySQL target with SSL verification

yaml
- target: rds-mysql-prod
  type: RDS_MYSQL
  name: Production MySQL on RDS
  integration: aws-prod
  region: us-east-1
  db_instance_identifier: my-prod-mysql
  host: my-prod-mysql.abc123.us-east-1.rds.amazonaws.com
  port: '3306'
  database: production
  ssl_mode: VERIFY_FULL
  ca_certificate: |
    -----BEGIN CERTIFICATE-----
    <paste the AWS RDS regional CA bundle for us-east-1 here>
    -----END CERTIFICATE-----
  auth:
    username: admin
    password: secured

Minimal

yaml
- target: rds-mysql
  type: RDS_MYSQL
  integration: aws-prod
  region: us-east-1
  db_instance_identifier: my-mysql
  host: my-mysql.abc123.us-east-1.rds.amazonaws.com
  auth:
    username: admin
    password: secured