Demo Pre requisite for FIS experiment Create IAM role and Current State

In this guide, we’ll verify the configuration of our Aurora PostgreSQL cluster and set up the IAM role required for AWS Fault Injection Simulator (FIS).

1. Review Aurora PostgreSQL Cluster Configuration

Ensure your Aurora PostgreSQL cluster is deployed regionally with the following setup:

2. Establish Baseline Metrics in CloudWatch

Before running an FIS experiment, capture steady-state performance metrics:

1. Open the AWS Console and navigate to CloudWatch → X-Ray Trace Map.
2. Select your target database (e.g., the adoption PostgreSQL cluster).
3. Set the time range to the last 30 minutes.

You should observe metrics similar to these:

3. Create an IAM Role for FIS

AWS FIS needs permission to act on your RDS resources and write logs. Follow these steps:

1. Navigate to IAM → Roles → Create role.

2. Under Trusted entity, choose AWS service, then select FIS.

3. For Use case, pick RDS.

4. Name the role FISRDSRole.

5. In the Trust policy editor, replace the JSON with:

   {
     "Version": "2012-10-17",
     "Statement": [
       {
         "Effect": "Allow",
         "Action": ["sts:AssumeRole"],
         "Principal": {
           "Service": ["fis.amazonaws.com"]
         }
       }
     ]
   }
   

6. Attach the managed policy CloudWatchLogsFullAccess (or a least-privilege equivalent) to enable logging.

Your IAM role is now ready to be selected when you configure and run your FIS experiment.

References

• AWS Fault Injection Simulator (FIS)
• Aurora PostgreSQL User Guide
• CloudWatch X-Ray Trace Map