create-db-instance
Description
Creates a new DB instance.
See also: AWS API Documentation
Synopsis
create-db-instance
[--db-name <value>]
--db-instance-identifier <value>
[--allocated-storage <value>]
--db-instance-class <value>
--engine <value>
[--master-username <value>]
[--master-user-password <value>]
[--db-security-groups <value>]
[--vpc-security-group-ids <value>]
[--availability-zone <value>]
[--db-subnet-group-name <value>]
[--preferred-maintenance-window <value>]
[--db-parameter-group-name <value>]
[--backup-retention-period <value>]
[--preferred-backup-window <value>]
[--port <value>]
[--multi-az | --no-multi-az]
[--engine-version <value>]
[--auto-minor-version-upgrade | --no-auto-minor-version-upgrade]
[--license-model <value>]
[--iops <value>]
[--option-group-name <value>]
[--character-set-name <value>]
[--publicly-accessible | --no-publicly-accessible]
[--tags <value>]
--db-cluster-identifier <value>
[--storage-type <value>]
[--tde-credential-arn <value>]
[--tde-credential-password <value>]
[--storage-encrypted | --no-storage-encrypted]
[--kms-key-id <value>]
[--domain <value>]
[--copy-tags-to-snapshot | --no-copy-tags-to-snapshot]
[--monitoring-interval <value>]
[--monitoring-role-arn <value>]
[--domain-iam-role-name <value>]
[--promotion-tier <value>]
[--timezone <value>]
[--enable-iam-database-authentication | --no-enable-iam-database-authentication]
[--enable-performance-insights | --no-enable-performance-insights]
[--performance-insights-kms-key-id <value>]
[--enable-cloudwatch-logs-exports <value>]
[--deletion-protection | --no-deletion-protection]
[--cli-input-json | --cli-input-yaml]
[--generate-cli-skeleton <value>]
[--debug]
[--endpoint-url <value>]
[--no-verify-ssl]
[--no-paginate]
[--output <value>]
[--query <value>]
[--profile <value>]
[--region <value>]
[--version <value>]
[--color <value>]
[--no-sign-request]
[--ca-bundle <value>]
[--cli-read-timeout <value>]
[--cli-connect-timeout <value>]
[--cli-binary-format <value>]
[--no-cli-pager]
[--cli-auto-prompt]
[--no-cli-auto-prompt]
Options
--db-name (string)
--db-instance-identifier (string)
The DB instance identifier. This parameter is stored as a lowercase string.
Constraints:
- Must contain from 1 to 63 letters, numbers, or hyphens.
- First character must be a letter.
- Cannot end with a hyphen or contain two consecutive hyphens.
Example: mydbinstance
--allocated-storage (integer)
--db-instance-class (string)
db.m4.large . Not all DB instance classes are available in all Amazon Regions.--engine (string)
The name of the database engine to be used for this instance.
Valid Values: neptune
--master-username (string)
--master-user-password (string)
--db-security-groups (list)
A list of DB security groups to associate with this DB instance.
Default: The default DB security group for the database engine.
(string)
Syntax:
"string" "string" ...
--vpc-security-group-ids (list)
A list of EC2 VPC security groups to associate with this DB instance.
Not applicable. The associated list of EC2 VPC security groups is managed by the DB cluster. For more information, see CreateDBCluster .
Default: The default EC2 VPC security group for the DB subnet group’s VPC.
(string)
Syntax:
"string" "string" ...
--availability-zone (string)
The EC2 Availability Zone that the DB instance is created in
Default: A random, system-chosen Availability Zone in the endpoint’s Amazon Region.
Example: us-east-1d
Constraint: The AvailabilityZone parameter can’t be specified if the MultiAZ parameter is set to true . The specified Availability Zone must be in the same Amazon Region as the current endpoint.
--db-subnet-group-name (string)
A DB subnet group to associate with this DB instance.
If there is no DB subnet group, then it is a non-VPC DB instance.
--preferred-maintenance-window (string)
The time range each week during which system maintenance can occur, in Universal Coordinated Time (UTC).
Format: ddd:hh24:mi-ddd:hh24:mi
The default is a 30-minute window selected at random from an 8-hour block of time for each Amazon Region, occurring on a random day of the week.
Valid Days: Mon, Tue, Wed, Thu, Fri, Sat, Sun.
Constraints: Minimum 30-minute window.
--db-parameter-group-name (string)
The name of the DB parameter group to associate with this DB instance. If this argument is omitted, the default DBParameterGroup for the specified engine is used.
Constraints:
- Must be 1 to 255 letters, numbers, or hyphens.
- First character must be a letter
- Cannot end with a hyphen or contain two consecutive hyphens
--backup-retention-period (integer)
The number of days for which automated backups are retained.
Not applicable. The retention period for automated backups is managed by the DB cluster. For more information, see CreateDBCluster .
Default: 1
Constraints:
- Must be a value from 0 to 35
- Cannot be set to 0 if the DB instance is a source to Read Replicas
--preferred-backup-window (string)
The daily time range during which automated backups are created.
Not applicable. The daily time range for creating automated backups is managed by the DB cluster. For more information, see CreateDBCluster .
--port (integer)
The port number on which the database accepts connections.
Not applicable. The port is managed by the DB cluster. For more information, see CreateDBCluster .
Default: 8182
Type: Integer
--multi-az | --no-multi-az (boolean)
--engine-version (string)
--auto-minor-version-upgrade | --no-auto-minor-version-upgrade (boolean)
Indicates that minor engine upgrades are applied automatically to the DB instance during the maintenance window.
Default: true
--license-model (string)
License model information for this DB instance.
Valid values: license-included | bring-your-own-license | general-public-license
--iops (integer)
--option-group-name (string)
--character-set-name (string)
--publicly-accessible | --no-publicly-accessible (boolean)
--tags (list)
The tags to assign to the new instance.
(structure)
Metadata assigned to an Amazon Neptune resource consisting of a key-value pair.
Key -> (string)
aws: or rds: . The string can only contain the set of Unicode letters, digits, white-space, ‘_’, ‘.’, ‘/’, ‘=’, ‘+’, ‘-’ (Java regex: “^([\p{L}\p{Z}\p{N}_.:/=+\-]*)$”).Value -> (string)
aws: or rds: . The string can only contain the set of Unicode letters, digits, white-space, ‘_’, ‘.’, ‘/’, ‘=’, ‘+’, ‘-’ (Java regex: “^([\p{L}\p{Z}\p{N}_.:/=+\-]*)$”).Shorthand Syntax:
Key=string,Value=string ...
JSON Syntax:
[
{
"Key": "string",
"Value": "string"
}
...
]
--db-cluster-identifier (string)
The identifier of the DB cluster that the instance will belong to.
For information on creating a DB cluster, see CreateDBCluster .
Type: String
--storage-type (string)
--tde-credential-arn (string)
--tde-credential-password (string)
--storage-encrypted | --no-storage-encrypted (boolean)
Specifies whether the DB instance is encrypted.
Not applicable. The encryption for DB instances is managed by the DB cluster. For more information, see CreateDBCluster .
Default: false
--kms-key-id (string)
The Amazon KMS key identifier for an encrypted DB instance.
The KMS key identifier is the Amazon Resource Name (ARN) for the KMS encryption key. If you are creating a DB instance with the same Amazon account that owns the KMS encryption key used to encrypt the new DB instance, then you can use the KMS key alias instead of the ARN for the KM encryption key.
Not applicable. The KMS key identifier is managed by the DB cluster. For more information, see CreateDBCluster .
If the StorageEncrypted parameter is true, and you do not specify a value for the KmsKeyId parameter, then Amazon Neptune will use your default encryption key. Amazon KMS creates the default encryption key for your Amazon account. Your Amazon account has a different default encryption key for each Amazon Region.
--domain (string)
--copy-tags-to-snapshot | --no-copy-tags-to-snapshot (boolean)
--monitoring-interval (integer)
The interval, in seconds, between points when Enhanced Monitoring metrics are collected for the DB instance. To disable collecting Enhanced Monitoring metrics, specify 0. The default is 0.
If MonitoringRoleArn is specified, then you must also set MonitoringInterval to a value other than 0.
Valid Values: 0, 1, 5, 10, 15, 30, 60
--monitoring-role-arn (string)
The ARN for the IAM role that permits Neptune to send enhanced monitoring metrics to Amazon CloudWatch Logs. For example, arn:aws:iam:123456789012:role/emaccess .
If MonitoringInterval is set to a value other than 0, then you must supply a MonitoringRoleArn value.
--domain-iam-role-name (string)
--promotion-tier (integer)
A value that specifies the order in which an Read Replica is promoted to the primary instance after a failure of the existing primary instance.
Default: 1
Valid Values: 0 - 15
--timezone (string)
--enable-iam-database-authentication | --no-enable-iam-database-authentication (boolean)
--enable-performance-insights | --no-enable-performance-insights (boolean)
--performance-insights-kms-key-id (string)
--enable-cloudwatch-logs-exports (list)
The list of log types that need to be enabled for exporting to CloudWatch Logs.
(string)
Syntax:
"string" "string" ...
--deletion-protection | --no-deletion-protection (boolean)
A value that indicates whether the DB instance has deletion protection enabled. The database can’t be deleted when deletion protection is enabled. By default, deletion protection is disabled. See Deleting a DB Instance .
DB instances in a DB cluster can be deleted even when deletion protection is enabled in their parent DB cluster.
--cli-input-json | --cli-input-yaml (string) Reads arguments from the JSON string provided. The JSON string follows the format provided by --generate-cli-skeleton. If other arguments are provided on the command line, those values will override the JSON-provided values. It is not possible to pass arbitrary binary values using a JSON-provided value as the string will be taken literally. This may not be specified along with --cli-input-yaml.
--generate-cli-skeleton (string) Prints a JSON skeleton to standard output without sending an API request. If provided with no value or the value input, prints a sample input JSON that can be used as an argument for --cli-input-json. Similarly, if provided yaml-input it will print a sample input YAML that can be used with --cli-input-yaml. If provided with the value output, it validates the command inputs and returns a sample output JSON for that command. The generated JSON skeleton is not stable between versions of the AWS CLI and there are no backwards compatibility guarantees in the JSON skeleton generated.
Global Options
--debug (boolean)
Turn on debug logging.
--endpoint-url (string)
Override command’s default URL with the given URL.
--no-verify-ssl (boolean)
By default, the AWS CLI uses SSL when communicating with AWS services. For each SSL connection, the AWS CLI will verify SSL certificates. This option overrides the default behavior of verifying SSL certificates.
--no-paginate (boolean)
Disable automatic pagination. If automatic pagination is disabled, the AWS CLI will only make one call, for the first page of results.
--output (string)
The formatting style for command output.
- json
- text
- table
- yaml
- yaml-stream
--query (string)
A JMESPath query to use in filtering the response data.
--profile (string)
Use a specific profile from your credential file.
--region (string)
The region to use. Overrides config/env settings.
--version (string)
Display the version of this tool.
--color (string)
Turn on/off color output.
- on
- off
- auto
--no-sign-request (boolean)
Do not sign requests. Credentials will not be loaded if this argument is provided.
--ca-bundle (string)
The CA certificate bundle to use when verifying SSL certificates. Overrides config/env settings.
--cli-read-timeout (int)
The maximum socket read time in seconds. If the value is set to 0, the socket read will be blocking and not timeout. The default value is 60 seconds.
--cli-connect-timeout (int)
The maximum socket connect time in seconds. If the value is set to 0, the socket connect will be blocking and not timeout. The default value is 60 seconds.
--cli-binary-format (string)
The formatting style to be used for binary blobs. The default format is base64. The base64 format expects binary blobs to be provided as a base64 encoded string. The raw-in-base64-out format preserves compatibility with AWS CLI V1 behavior and binary values must be passed literally. When providing contents from a file that map to a binary blob fileb:// will always be treated as binary and use the file contents directly regardless of the cli-binary-format setting. When using file:// the file contents will need to properly formatted for the configured cli-binary-format.
- base64
- raw-in-base64-out
--no-cli-pager (boolean)
Disable cli pager for output.
--cli-auto-prompt (boolean)
Automatically prompt for CLI input parameters.
--no-cli-auto-prompt (boolean)
Disable automatically prompt for CLI input parameters.
Output
DBInstance -> (structure)
Contains the details of an Amazon Neptune DB instance.
This data type is used as a response element in the DescribeDBInstances action.
DBInstanceIdentifier -> (string)
DBInstanceClass -> (string)
Engine -> (string)
DBInstanceStatus -> (string)
MasterUsername -> (string)
DBName -> (string)
Endpoint -> (structure)
Specifies the connection endpoint.
Address -> (string)
Port -> (integer)
HostedZoneId -> (string)
AllocatedStorage -> (integer)
InstanceCreateTime -> (timestamp)
PreferredBackupWindow -> (string)
BackupRetentionPeriod .BackupRetentionPeriod -> (integer)
DBSecurityGroups -> (list)
Provides List of DB security group elements containing only DBSecurityGroup.Name and DBSecurityGroup.Status subelements.
(structure)
Specifies membership in a designated DB security group.
DBSecurityGroupName -> (string)
Status -> (string)
VpcSecurityGroups -> (list)
Provides a list of VPC security group elements that the DB instance belongs to.
(structure)
This data type is used as a response element for queries on VPC security group membership.
VpcSecurityGroupId -> (string)
Status -> (string)
DBParameterGroups -> (list)
Provides the list of DB parameter groups applied to this DB instance.
(structure)
The status of the DB parameter group.
This data type is used as a response element in the following actions:
- CreateDBInstance
- DeleteDBInstance
- ModifyDBInstance
- RebootDBInstance
DBParameterGroupName -> (string)
ParameterApplyStatus -> (string)
AvailabilityZone -> (string)
DBSubnetGroup -> (structure)
Specifies information on the subnet group associated with the DB instance, including the name, description, and subnets in the subnet group.
DBSubnetGroupName -> (string)
DBSubnetGroupDescription -> (string)
VpcId -> (string)
SubnetGroupStatus -> (string)
Subnets -> (list)
Contains a list of Subnet elements.
(structure)
Specifies a subnet.
This data type is used as a response element in the DescribeDBSubnetGroups action.
SubnetIdentifier -> (string)
SubnetAvailabilityZone -> (structure)
Specifies the EC2 Availability Zone that the subnet is in.
Name -> (string)
SubnetStatus -> (string)
DBSubnetGroupArn -> (string)
PreferredMaintenanceWindow -> (string)
PendingModifiedValues -> (structure)
Specifies that changes to the DB instance are pending. This element is only included when changes are pending. Specific changes are identified by subelements.
DBInstanceClass -> (string)
DBInstanceClass for the DB instance that will be applied or is currently being applied.AllocatedStorage -> (integer)
AllocatedStorage size for the DB instance that will be applied or is currently being applied.MasterUserPassword -> (string)
Port -> (integer)
BackupRetentionPeriod -> (integer)
MultiAZ -> (boolean)
EngineVersion -> (string)
LicenseModel -> (string)
Iops -> (integer)
DBInstanceIdentifier -> (string)
DBInstanceIdentifier for the DB instance that will be applied or is currently being applied.StorageType -> (string)
CACertificateIdentifier -> (string)
DBSubnetGroupName -> (string)
PendingCloudwatchLogsExports -> (structure)
This PendingCloudwatchLogsExports structure specifies pending changes to which CloudWatch logs are enabled and which are disabled.
LogTypesToEnable -> (list)
Log types that are in the process of being deactivated. After they are deactivated, these log types aren’t exported to CloudWatch Logs.
(string)
LogTypesToDisable -> (list)
Log types that are in the process of being enabled. After they are enabled, these log types are exported to CloudWatch Logs.
(string)
LatestRestorableTime -> (timestamp)
MultiAZ -> (boolean)
EngineVersion -> (string)
AutoMinorVersionUpgrade -> (boolean)
ReadReplicaSourceDBInstanceIdentifier -> (string)
ReadReplicaDBInstanceIdentifiers -> (list)
Contains one or more identifiers of the Read Replicas associated with this DB instance.
(string)
ReadReplicaDBClusterIdentifiers -> (list)
Contains one or more identifiers of DB clusters that are Read Replicas of this DB instance.
(string)
LicenseModel -> (string)
Iops -> (integer)
OptionGroupMemberships -> (list)
(structure)
Not supported by Neptune.
OptionGroupName -> (string)
Status -> (string)
CharacterSetName -> (string)
SecondaryAvailabilityZone -> (string)
PubliclyAccessible -> (boolean)
StatusInfos -> (list)
The status of a Read Replica. If the instance is not a Read Replica, this is blank.
(structure)
Provides a list of status information for a DB instance.
StatusType -> (string)
Normal -> (boolean)
Status -> (string)
Message -> (string)
StorageType -> (string)
TdeCredentialArn -> (string)
DbInstancePort -> (integer)
DBClusterIdentifier -> (string)
StorageEncrypted -> (boolean)
KmsKeyId -> (string)
DbiResourceId -> (string)
CACertificateIdentifier -> (string)
DomainMemberships -> (list)
Not supported
(structure)
An Active Directory Domain membership record associated with a DB instance.
Domain -> (string)
Status -> (string)
FQDN -> (string)
IAMRoleName -> (string)
CopyTagsToSnapshot -> (boolean)
MonitoringInterval -> (integer)
EnhancedMonitoringResourceArn -> (string)
MonitoringRoleArn -> (string)
PromotionTier -> (integer)
DBInstanceArn -> (string)
Timezone -> (string)
IAMDatabaseAuthenticationEnabled -> (boolean)
PerformanceInsightsEnabled -> (boolean)
PerformanceInsightsKMSKeyId -> (string)
EnabledCloudwatchLogsExports -> (list)
A list of log types that this DB instance is configured to export to CloudWatch Logs.
(string)
DeletionProtection -> (boolean)
© Copyright 2025, Amazon Web Services. Created using Sphinx.