Exporting Data from RDS to S3

Go to the bob2 database instance here.

Click on Actions -> Export to Amazon S3

Create a new export using the following parameters:

• Export identifier: [whatever you want, needs to be unique]
• Export: Partial
• Identifiers: [List of space delimited databases, e.g. obsgroups202601 obsgroups202602 obsgroups202603]
• S3 bucket: gt-db-exports (ironically this is named for the OTHER DB in Amazon) 
• S3 prefix: obsgroups
• IAM role: rds-s3-exports
• Encryption AWS KMS Key: WebroomsDbKey

Note that this IAM role has a defined policy associated with it here:

Json trust policy:

{
   "Version": "2012-10-17",
   "Statement": [
       {
           "Sid": "VisualEditor0",
           "Effect": "Allow",
           "Action": [
               "s3:PutObject*",
               "s3:ListBucket",
               "s3:GetObject*",
               "s3:DeleteObject*",
               "s3:GetBucketLocation"
           ],
           "Resource": [
               "arn:aws:s3:::gt-db-exports",
               "arn:aws:s3:::gt-db-exports/*",
               "arn:aws:s3:::gt-db-exports/obsgroups/*",
               "arn:aws:s3:::aws-athena-query-results-042337940220-us-west-2"
           ]
       }
   ]
}

And Bucket Policy here:

Json policy file:

{
   "Version": "2012-10-17",
   "Statement": [
       {
           "Sid": "Statement1",
           "Effect": "Allow",
           "Principal": {
               "AWS": "arn:aws:iam::042337940220:role/service-role/rds-s3-exports"
           },
           "Action": "s3:*",
           "Resource": "arn:aws:s3:::aws-athena-query-results-042337940220-us-west-2"
       },
       {
           "Sid": "Statement2",
           "Effect": "Allow",
           "Principal": {
               "AWS": "arn:aws:iam::042337940220:role/service-role/ExportArchiveDBsToS3"
           },
           "Action": "s3:*",
           "Resource": "arn:aws:s3:::aws-athena-query-results-042337940220-us-west-2"
       }
   ]
}

Once completed, the export is visible here.