RelationalDatabases Object
Relationships
graph LR
RelationalDatabases -->|"account"| Accounts
RelationalDatabases -->|"attached_rule_sets"| FirewallRuleSets
RelationalDatabases -->|"encryption_key"| ManagedKeys
RelationalDatabases -->|"audit_log_destinations"| LogDestinations
RelationalDatabases -->|"replicas"| RelationalDatabases
Properties
Truto's stable unified identifier for this object. Opaque; use provider_id to address the object in the provider's own console or API.
Whether any allowed network rule permits the whole internet.
Ingress rules that reach this database.
Lowest port allowed.
The protocol allowed.
The source range or security group allowed in.
Highest port allowed.
The firewall rule sets attached to this database.
The target's id.
Where audit and error logs are delivered. AWS creates the destination on first write, so a row here can name a log group that does not exist yet.
The target's id.
How many days of backups are retained.
When Truto actually read this object from the provider, in UTC ISO 8601 with the offset present — not the request time, and not a provider timestamp.
When the object was created at the provider, in UTC ISO 8601. Null when the provider does not record one - see unreadable_fields.
The provider's own identifier for the database.
Whether the database is protected against deletion.
Whether storage is encrypted at rest.
The key protecting the database at rest.
The target's id.
Who manages the storage encryption key. AWS merges provider-managed and customer-managed into one value (only provider-owned is distinguishable); resolving further may yield permission_denied.
provider_managedprovider_ownedcustomer_managednoneunknown
The database engine, as the provider names it.
The provider's support status for this engine version, where exposed.
The database engine version currently running.
The global cluster this database belongs to, where it is part of one.
The database's high-availability topology, distinguishing standby, multi-AZ, and multi-region configurations.
nonesingle_standbymulti_az_clustermulti_regionzone_redundantunknown
Whether this row is the writer of its cluster or global cluster.
The most recent point the database could be restored to.
Where the database sits.
Minimum TLS version accepted. Often not derivable on AWS: some engines have no true minimum, only an allow-list or independent toggles, and an absent parameter isn't the same as off.
The provider's own type string, unmodified — for example 'AWS::S3::Bucket', 'aws_iam_role', 'Microsoft.Sql/servers'. Used for display and drill-down.
Whether point-in-time restore is available. AWS has no such flag; this is derived from backup retention and cross-checked against latest_restorable_time.
Which cloud this object was read from.
awsazuregcp
The provider's own identifier, passed through verbatim — a full ARN, resource id, or self-link. Never truncated, prefixed, or normalized.
The provider's public-network-access flag, not proven reachability: true doesn't mean reachable, and false doesn't mean safe — actual exposure also depends on routing.
Where the object is located. 'global' denotes genuinely global resources (e.g. IAM, GCP VPC networks) rather than a guessed region. A substituted region (when none is derivable) is flagged in unreadable_fields.
Raw data returned from the remote API call.
Regions holding replicas of this database.
The replica databases themselves.
The target's id.
The provider's own storage encryption type string, verbatim.
Key-value pairs exactly as the customer set them: no case folding, key/value normalization, or merging of separate provider concepts. An empty object means no tags; tags that could not be read appear in unreadable_fields instead.
Whether TLS is required for connections, independent of any minimum version floor.
Whether this row represents a cluster or a standalone instance.
clusterinstanceunknown
Fields on this object that could not be read, and why. An empty array means everything was read. Use this to tell a real value from a missing one.
Explanation of the reason, where one adds anything.
The property on this resource that could not be read.
Why the field could not be read. available_on_get: Not read on list to keep the list fast; call GET for this resource's id to get it.
not_supported_by_providernot_configuredpermission_deniednot_collectedcollection_errorpartially_collectedavailable_on_get
When the object was last modified at the provider, in UTC ISO 8601. Null when the provider does not record one - see unreadable_fields.