To create an IAM username:

1. Enable IAM DB authentication on the RDS DB instance.
2. Create Database user using master login (rds_iam

   • For MySQL create the username using master login (rds_iam):

     • mysql --protocol=tcp --host=instance_fqdn --user=admin -p --port=3306

     • CREATE USER iamuser IDENTIFIED WITH AWSAuthenticationPlugin as 'RDS';

     • GRANT USAGE, DROP, SELECT, CREATE, SHOW VIEW, EVENT, LOCK TABLES , ALTER, CREATE VIEW, INSERT, REFERENCES, ALTER ROUTINE, PROCESS ON *.* TO `iamuser`@`%`;

   • For PostgreSQL create the user under server.

     • psql -h instance_fqdn -U postgres

     • CREATE USER iamuser WITH LOGIN;

     • GRANT rds_iam TO iamuser;

     • ALTER ROLE iamuser WITH LOGIN CREATEDB;

     • GRANT postgres TO iamuser;

3. Attach the RDS policy to the IAM role attached to the NetBackup media server.