Skip to content

Instantly share code, notes, and snippets.

@HarshadRanganathan
Last active April 4, 2022 09:08
Show Gist options
  • Save HarshadRanganathan/a959346e41eb443cbc53ced97eee4778 to your computer and use it in GitHub Desktop.
Save HarshadRanganathan/a959346e41eb443cbc53ced97eee4778 to your computer and use it in GitHub Desktop.
AWS Service Checklist/Practices
  • Single-master cluster
  • 1 write and 1 read/replica node
    • Write node r5.8xlarge instance
    • Replica/Read node r5.8xlarge instance
  • Engine version: 5.7.mysql_aurora.2.07.5 (LTS)
  • Replica/Reader node in different AZ - Fast failover and high availability
  • Subnet groups - private subnets in different AZs
  • RDS Data API
  • Event Subscriptions
  • Maintenance Window
  • Performance Insights
  • Delete Protection
  • Log Exports
    • Audit Log (QUERY_DDL + TABLE events, exclude rdsadmin user logs since it will bloat with automation events)
    • Slow Query Log
      • log_queries_not_using_indexes
  • IAM Role for S3
    • Set aws_default_s3_role in cluster parameter group to the new IAM role
  • DB Encryption
  • Automated Snapshots
  • Final Snapshot
  • Backup Retention Period
  • Enhanced Monitoring
  • RDS Proxy
    • Enable reader endpoint
    • New IAM Role to access secret manager
  • Autoscaling of read replicas
    • Target metric - Average CPU utilization of Aurora Replicas
    • Target value - 70
    • Minimum Capacity - 0
    • Maximum Capacity - 2
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment