NetBackup™ Web UI Cloud Administrator's Guide

To create an IAM username:

1. Enable IAM DB authentication on the RDS DB instance.
2. Create Database user using master login (rds_iam

   • For MySQL create the username using master login (rds_iam):

     • mysql --protocol=tcp --host=instance_fqdn --user=admin -p --port=3306

     • CREATE USER iamuser IDENTIFIED WITH AWSAuthenticationPlugin as 'RDS';

     • GRANT SELECT, INSERT, UPDATE, DELETE, CREATE, DROP, RELOAD, PROCESS, REFERENCES, INDEX, ALTER, SHOW DATABASES, LOCK TABLES, CREATE VIEW, SHOW VIEW, CREATE ROUTINE, ALTER ROUTINE, EVENT, TRIGGER ON *.* TO `iamuser`@'%' WITH GRANT OPTION;

   • For PostgreSQL create the user under server.

     • psql -h instance_fqdn -U postgres

     • CREATE USER iamuser WITH LOGIN;

     • GRANT rds_iam TO iamuser;

     • ALTER ROLE iamuser WITH LOGIN CREATEDB;

     • GRANT postgres TO iamuser;

3. Attach the RDS policy to the IAM role attached to the NetBackup media server.