# Amazon RDS PostgreSQL

This Integration requires Fides Cloud or Fides Enterprise. For more information, [talk to our solutions team.](/content/speak-with-us?utm_source=docs-site/index.html)

[RDS PostgreSQL](https://aws.amazon.com/rds/postgresql/) extends standard PostgreSQL functionality to help organizations set up, operate, and scale their solution on the cloud.

## Prerequisites

In order to integrate with RDS PostgreSQL, you'll need to collect the following information from the database administrator:

- `Authentication Method`: Determines which type of authentication method to use for connecting to Amazon Web Services. More details are provided below.
- `Access Key ID` & `Secret Access Key`: The credentials that provide access to your AWS account. These can be found or created in a IAM user's `Security credentials` tab.
- `DB Username`: The user account used to authenticate and access the database.
- `Assume Role ARN`: If provided, the ARN of the role that should be assumed to connect to AWS.
- `Region name`: The AWS region where your RDS PostgreSQL Database is located (e.g. us-west-2). This is visible when logging into the [AWS Management Console](https://console.aws.amazon.com/).

These connection details can be provided through the form described [below](/content/docs/integrations/databases/rdspostgresql#configuring-a-dataset/index.html), using 'secret key' authentication; **this is recommended**. Alternatively, 'automatic' authentication provides you the option to set connection credentials as environment variables in your Fides deployment by following [these instructions](https://boto3.amazonaws.com/v1/documentation/api/latest/guide/credentials.html#configuring-credentials).

Additionally, the Fides AWS account will need sufficient permissions in its IAM policy `Statement` to submit requests to the database. For example, the statement object below permits Fides sufficient permissions to issue Access requests.

```json
"Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "rds-db:connect"
            ],
            "Resource": [
                "arn:aws:rds-db:REGION:12345:dbuser:cluster-NAME/fides_user_name"
            ]
        },
        {
            "Effect": "Allow",
            "Action": [
                "rds:DescribeDBClusters"
            ],
            "Resource": [
                "arn:aws:rds:REGION:12345:cluster:*"
            ]
        },
        {
            "Effect": "Allow",
            "Action": [
                "rds:DescribeDBInstances"
            ],
            "Resource": [
                "arn:aws:rds:REGION:12345:db:*"
            ]
        }
    ]
```

Of course, the user account referenced above will need sufficient permissions on the database. These can be set using the following commands:

```sql
CREATE USER username WITH LOGIN;
GRANT rds_iam TO username;
GRANT SELECT ON ALL TABLES IN SCHEMA public TO username;
GRANT ALL PRIVILEGES ON ALL TABLES IN SCHEMA public TO username;
```

## Integrating with RDS PostgreSQL

To integrate an existing system with RDS PostgreSQL:

1. Navigate to **Data map** → **View Systems** and choose the system that you want to connect to
2. Click on the **Integrations** tab.
3. Pick the vendor or system type that you want to integrate with from the **Connection type** drop-down menu.
4. Complete the required fields for the integration and click **Save**.

You may confirm your connection is working using the **Test connection** button, if desired.

To learn more, please see our guide for [Managing Integrations](/content/docs/integrations/guides/manage-integrations/index.html).

## Configuring a dataset

A dataset is required to configure an integration to this database. A dataset is a configuration file that tell Fides how to query and update data in the database. To learn more about how to create and manage datasets, please see our [Managing datasets](/content/docs/integrations/guides/datasets/index.html) guide.

### Dataset Namespace

RDS PostgreSQL datasets support namespaces. This means that the dataset can contain the **database instance name**, **database name**, and optionally a **schema** that will be used when accessing or masking data from a given RDS PostgreSQL table. If namespace information is not included, the dataset will use the defaults from the associated integration.

```yaml
dataset:
  - fides_key: rds_postgres_example_dataset
    name: RDS Postgres Example Dataset
    description: Example of an RDS Postgres dataset.
    fides_meta:
      namespace:
        database_instance_name: my-rds-instance
        database_name: my_database
        schema: public
    ...
```