awsflow-rds

Describe Amazon RDS instances, clusters, snapshots, and related resources for read-only auditing.

3|1|Updated Dec 22, 2025

Search Tags:#database #aws #audit #inventory #rds #read-only #describe

Ready to run

npx skills add https://github.com/necatiarslan/awsflow --skill awsflow-rds

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: awsflow-rds
Source: https://github.com/necatiarslan/awsflow/tree/main/skills/awsflow-rds
Command: npx skills add https://github.com/necatiarslan/awsflow --skill awsflow-rds

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill enables safe, read-only discovery and auditing of Amazon RDS resources across instances, clusters, snapshots, and related configurations.

Core Features & Use Cases

Read-only RDS discovery: DescribeDBInstances, DescribeDBClusters, DescribeDBSnapshots, DescribeDBEngineVersions, DescribeDBLogFiles, DescribeDBSubnetGroups, DescribeDBParameterGroups, and more to inventory resources and state.
Audit and compliance: Fetch configuration details and recent events to support security reviews and change tracking.
Use Case: You want an up-to-date inventory of all RDS resources in your account to verify configurations and identify drift.

Quick Start

Ask the skill to DescribeDBInstances for a specific DBInstanceIdentifier to retrieve current RDS instance details.

Frequently Asked Questions about awsflow-rds

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I perform a read-only audit of Amazon RDS instances and clusters?▼

You can perform a read-only RDS audit by running Describe commands like DescribeDBInstances and DescribeDBClusters to retrieve current configurations, inventory resources, and identify drift across your AWS environments.

What is the best way to inventory RDS snapshots and parameter groups without modifying resources?▼

To inventory RDS snapshots and parameter groups safely, use read-only Describe commands like DescribeDBSnapshots and DescribeDBParameterGroups to fetch configuration details without modifying any resources.

Can I fetch RDS log files and subnet group configurations for compliance tracking?▼

Yes, you can fetch RDS log files and subnet group configurations for compliance tracking by implementing DescribeDBLogFiles and DescribeDBSubnetGroups commands to inspect configurations and recent events.

Does this RDS auditing approach require write permissions or specific AWS IAM roles?▼

This RDS auditing approach requires only read-only permissions since it implements Describe commands exclusively, meaning your IAM role needs Describe access to RDS resources but no write permissions.

How do I retrieve DB engine versions during an RDS resource inspection?▼

To retrieve DB engine versions during RDS inspection, pass a params object to the DescribeDBEngineVersions command to return available engine details and verify configuration compatibility across instances.