Xata Agent ‐ AWS integration guide

This guide walks you through creating an IAM policy and user to be used by the Xata Agent.

Step 1: Create an IAM Policy

1. Open the IAM Console, navigate to the Policies page, and click Create policy.
2. Switch to the JSON editor and enter the following policy:

{
	"Version": "2012-10-17",
	"Statement": [
		{
			"Effect": "Allow",
			"Action": [
				"rds:DescribeDBInstances",
				"rds:DescribeDBClusters",
				"rds:ListTagsForResource",
				"rds:DescribeDBClusterSnapshots",
				"rds:DescribeDBInstanceAutomatedBackups",
				"rds:DescribeDBSnapshots",
				"rds:DescribeDBLogFiles",
				"rds:DownloadDBLogFilePortion"
			],
			"Resource": "*"
		},
		{
			"Effect": "Allow",
			"Action": [
				"cloudwatch:GetMetricStatistics",
				"cloudwatch:ListMetrics",
				"cloudwatch:GetMetricData"
			],
			"Resource": "*"
		},
		{
			"Effect": "Allow",
			"Action": [
				"logs:DescribeLogGroups",
				"logs:DescribeLogStreams",
				"logs:GetLogEvents",
				"logs:FilterLogEvents"
			],
			"Resource": "*"
		}
	]
}

3. Click Next.
4. Enter a policy name: XataAgentRDSPolicy.
5. Click Create policy.

Step 2: Create an IAM User

1. Navigate to the Users page and click Create user.
2. Enter xata-agent as the User name.

3. Click Next.
4. Under Permissions, select Attach policies directly.
5. Search for the newly created XataAgentRDSPolicy and select it.

6. Click Next and then Create User.

Step 3: Generate Access Keys

1. Open the xata-agent user settings.
2. Go to the Security credentials tab.
3. Under Access keys, click Create access key.
4. On the next page, select Other.
5. Click Next twice to generate the access key.
6. Download the CSV file or copy the Access key and Secret access key for use in the Agent configuration.