AWS RDS Role type Master vs Instance

Question

When creating a new MySQL RDS instance, named app-dbid, the role type says master

When creating a MySQL RDS instance that is from the snapshot of app-dbid, naming it app2-dbid, the role type says Instance.

I was curious what these terms mean, and what the ramifications are of deleting the "master" app-dbid but keeping the app2-dbid instance

Answer 1

AWS Identity and Access Management (IAM) is a service provided by Amazon Web Services that allows administrators to securely manage access to AWS services. Authentication (signing in) and authorization (having permissions) to use Amazon RDS resources are controlled by IAM administrators. IAM is a free AWS feature that you can use whenever you want.

A client of the service If you work with Amazon RDS, your administrator will give you with the necessary credentials and permissions. You could require extra permissions if you use more Amazon RDS functionalities in your operation. Understanding how access is controlled might assist you in requesting the appropriate permissions from your system administrator. See Troubleshooting Amazon RDS Identity and Access if you can't access a function in Amazon RDS.

A manager of service - You most likely have full access to Amazon RDS if you're in charge of Amazon RDS resources at your firm. It's your responsibility to figure out which Amazon RDS capabilities and resources your employees should have access to. To alter your service users' rights, you must make requests to your IAM administrator. To grasp the fundamental concepts of IAM, review the information on this page. See How Amazon RDS Works with IAM for additional information on how your business can use IAM with Amazon RDS.

Administrator of IAM – If you're an IAM administrator, you might be interested in learning more about how to design policies to govern Amazon RDS access. See Amazon RDS identity-based policy examples for examples of Amazon RDS identity-based policies that you can use in IAM.