Amazon RDS

Reads tables from an Amazon RDS instance. RDS runs the stock PostgreSQL and MySQL engines, so it connects exactly like a self-hosted database. Flitch only issues read queries, so it can never write to your database.

Add a source

RDS comes in two engines. Pick the tile that matches yours: RDS Postgres or RDS MySQL.

Prerequisites

An RDS instance with its security group allowing Flitch's connector egress IP on the database port.
A user with read access to the tables you want.

Create a read-only user

CREATE USER flitch_readonly WITH PASSWORD 'choose-a-strong-password';
GRANT CONNECT ON DATABASE mydb TO flitch_readonly;
GRANT USAGE ON SCHEMA public TO flitch_readonly;
GRANT SELECT ON ALL TABLES IN SCHEMA public TO flitch_readonly;

Build the connection string

Copy the endpoint from the RDS console (Databases → your instance → Connectivity & security).

postgresql://flitch_readonly:password@mydb.abc123.us-east-1.rds.amazonaws.com:5432/mydb?sslmode=require

Open the form

Go to Data → Add → RDS Postgres, paste the connection string, then pick datasets.

Create a read-only user

CREATE USER 'flitch_readonly'@'%' IDENTIFIED BY 'choose-a-strong-password';
GRANT SELECT ON mydb.* TO 'flitch_readonly'@'%';
FLUSH PRIVILEGES;

Build the connection string

mysql://flitch_readonly:password@mydb.abc123.us-east-1.rds.amazonaws.com:3306/mydb?ssl-mode=REQUIRED

Open the form

Go to Data → Add → RDS MySQL, paste the connection string, then pick datasets.

Network access

Flitch connects from its own server, not your browser. Add Flitch's connector egress IP (shown in the Add Source form) to the instance's VPC security group on the database port, and make sure the instance is publicly accessible or otherwise reachable from Flitch.

Team-wide credential (optional)

A team admin can store one shared credential in Settings → Data connections; new connections then default to it, with no per-connection secret.

Refresh

Refresh is off by default. Enable it to schedule a background refresh and serve from cache between runs. See Refresh.

Troubleshooting

Connection timed out. The security group does not allow Flitch's egress IP, or the instance is not publicly reachable. Add the egress IP on the database port.

Authentication failed. Check the user and password, and that the user can connect from any host.

no pg_hba.conf entry / SSL required. Keep sslmode=require (Postgres) or ssl-mode=REQUIRED (MySQL); RDS enforces TLS by default.

Amazon RDS

On this page