- Open the Amazon RDS console. In the left navigation, choose Databases, then Create database to start the wizard.

1 — Engine selection
- Select the Aurora engine that fits your application: Aurora MySQL-compatible or Aurora PostgreSQL-compatible.
- Choose the engine version required by your application (for example, Aurora PostgreSQL 15.4). You can use the default version shown or choose a specific minor/major release if you depend on particular features or bug fixes.

2 — Templates and credentials
- Pick a creation template: Production, Dev/Test, or Free tier (if visible). For this demo we select the Production template to show typical production options.
- Provide a DB cluster identifier (for example,
aurora-example) and set the master username. For the password, either let AWS Secrets Manager generate one or enter a secure password manually.
3 — Storage configuration
- Aurora storage is managed, but you can choose storage performance options such as Standard (cost-effective) or I/O-Optimized (for high I/O workloads). For a basic demo, select Standard.
4 — Instance configuration
- Decide between Serverless v2 (if supported by the chosen engine/version) and provisioned instances. For Serverless v2, specify min/max Aurora Capacity Units (ACUs).
- For provisioned instances, pick an instance class (for example, a burstable class like
db.t3.medium, memory-optimized, or compute-optimized). Choose a class that matches your performance and cost goals.

Quick reference: common configuration choices
5 — Availability, networking, and access
- Choose Availability & durability options: deploy a single writer only, or add Aurora Replicas (readers) across AZs for Multi-AZ/high availability. For production, enable Multi-AZ.
- Select the VPC and DB subnet group. Using the default VPC/subnet group will place instances across available AZs.
- Configure Public access: typically set to No for production. For short demos you may enable public access, but restrict access via security groups.
- If you need connectivity from EC2, configure it here (you can skip attaching an EC2 instance for a basic demo).

Do not enable public access for production databases. If you temporarily enable public access for testing, restrict inbound traffic with security groups and remove public access when finished.
6 — Security and additional networking
- Attach or create VPC security groups to control inbound access. Limit source IPs and ports to reduce attack surface.
- Optionally enable an RDS Proxy to improve connection pooling and scalability.
- In Additional configuration you can set the database port (PostgreSQL default is
5432), authentication options (IAM DB authentication), parameter groups, and initial database name.

7 — Monitoring, logs, and maintenance
- Enable Performance Insights when you need advanced monitoring and query performance tuning (note: extra cost may apply).
- Configure database logging and retention only for the logs you need; longer retention increases storage costs.
- Set backup retention (commonly 7 days by default), enable encryption if required, pick parameter and option groups, and set a maintenance window.
- If deletion protection is enabled, you must disable it before deleting the cluster.
8 — Cost estimate
- Review the console’s estimated monthly cost for the chosen configuration (instances, storage, backups, and optional features). Adjust choices to balance cost and performance.

9 — Create the database
- When ready, click Create database. Provisioning can take several minutes depending on the configuration and region.
10 — Viewing cluster and instance endpoints
- After provisioning, the cluster (for example,
aurora-example) appears in the Databases list and includes at least a writer instance and any reader instances you added. - Important endpoints:
- Cluster writer endpoint — routes writes to the primary/writer instance.
- Cluster reader endpoint — load-balances reads across readers (if no readers exist, it resolves to the writer).
- Each instance exposes its own instance-level endpoint and networking metadata under the Connectivity & security tab (endpoint, port, VPC, subnets, AZ, and security groups).

11 — Cluster actions and management
From the cluster actions menu you can:- Add reader instances to scale reads.
- Create blue/green deployments for safer upgrades.
- Take snapshots and restore from them.
- Export data to S3.
- Configure autoscaling for replicas and manage backups.
12 — Deleting the cluster
To delete a cluster:- Ensure there are no blocking features (disable deletion protection if enabled).
- Remove reader instances if necessary.
- From the cluster actions menu, choose Delete. The console will prompt whether to create a final snapshot or retain automated backups—select according to your recovery needs.
- Confirm by following the prompt (you may need to type the cluster name for confirmation).

Before deleting a cluster: disable deletion protection and decide whether a final snapshot is required for recovery.
Best practices checklist
- Use Multi-AZ and read replicas for high availability and read scaling.
- Do not expose production databases publicly; rely on secure VPC and security groups.
- Enable encryption at rest for sensitive data.
- Regularly review backup retention and snapshot strategies.
- Use monitoring (CloudWatch, Performance Insights) to detect performance issues early.
Links and references
- Amazon Aurora overview: https://docs.aws.amazon.com/aurora/latest/userguide/aurora-introduction.html
- Amazon RDS documentation: https://docs.aws.amazon.com/rds/index.html
- Configure Amazon RDS security groups: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Overview.SecurityGroups.html