rds_instance_license_info

AWS RDS Instance License Information

Deprecated

This policy is no longer being updated. The AWS Rightsize RDS Instances policy can be used with the Underutilized Instance CPU Threshold (%) parameter set to 100 and the Report Unused or Underutilized parameter set to Underutilized to retrieve the same information.

What It Does

This Policy Template gathers AWS RDS Instance data related to licensing.

How It Works

• This policy identifies all RDS instances and provides details on engine, version, license, and vCPU.

Input Parameters

This policy has the following input parameters required when launching the policy.

• Allowed/Denied Regions - Whether to treat regions parameter as allow or deny list.
• Regions - A list of regions to allow or deny for an AWS account. Please enter the regions code if SCP is enabled, see Available Regions in AWS; otherwise, the policy may fail on regions that are disabled via SCP. Leave blank to consider all the regions.
• Email addresses to notify - A list of email addresses to notify
• Account Number - The Account number for use with the AWS STS Cross Account Role. Leave blank when using AWS IAM Access key and secret. It only needs to be passed when the desired AWS account is different than the one associated with the Flexera One credential. more

Policy Actions

The following policy actions are taken on any resources found to be out of compliance.

• Send an email report

Prerequisites

This Policy Template uses Credentials for authenticating to datasources -- in order to apply this policy you must have a Credential registered in the system that is compatible with this policy. If there are no Credentials listed when you apply the policy, please contact your Flexera Org Admin and ask them to register a Credential that is compatible with this policy. The information below should be consulted when creating the credential(s).

• AWS Credential (provider=aws) which has the following permissions:

  • ec2:DescribeRegions
  • rds:DescribeDBInstances
  • sts:GetCallerIdentity

  Example IAM Permission Policy:

  {
      "Version": "2012-10-17",
      "Statement": [
          {
              "Effect": "Allow",
              "Action": [
                  "ec2:DescribeRegions",
                  "rds:DescribeDBInstances",
                  "sts:GetCallerIdentity"
              ],
              "Resource": "*"
          }
      ]
  }

• Flexera Credential (provider=flexera) which has the following roles:

  • billing_center_viewer

The Provider-Specific Credentials page in the docs has detailed instructions for setting up Credentials for the most common providers.

Supported Clouds

• AWS

Cost

This policy template does not incur any cloud costs.