Performing Common System Tasks For Oracle DB Instances

Performing common system tasks for Oracle DB instances - Amazon Relational Database ServiceDocumentationAmazon RDSUser GuideSetting up a custom DNS server

Following, you can find how to perform certain common DBA tasks related to the system on your Amazon RDS DB instances running Oracle. To deliver a managed service experience, Amazon RDS doesn't provide shell access to DB instances, and restricts access to certain system procedures and tables that require advanced privileges.

Topics

• Disconnecting a session

• Terminating a session

• Canceling a SQL statement in a session

• Enabling and disabling restricted sessions

• Flushing the shared pool

• Granting SELECT or EXECUTE privileges to SYS objects

• Revoking SELECT or EXECUTE privileges on SYS objects

• Managing RDS_X$ views for Oracle DB instances

• Granting privileges to non-master users

• Creating custom functions to verify passwords

• Setting up a custom DNS server

• Setting and unsetting system diagnostic events

Setting up a custom DNS server

Amazon RDS supports outbound network access on your DB instances running Oracle. For more information about outbound network access, including prerequisites, see Configuring UTL_HTTP access using certificates and an Oracle wallet.

Amazon RDS Oracle allows Domain Name Service (DNS) resolution from a custom DNS server owned by the customer. You can resolve only fully qualified domain names from your Amazon RDS DB instance through your custom DNS server.

After you set up your custom DNS name server, it takes up to 30 minutes to propagate the changes to your DB instance. After the changes are propagated to your DB instance, all outbound network traffic requiring a DNS lookup queries your DNS server over port 53.

To set up a custom DNS server for your Amazon RDS for Oracle DB instance, do the following:

• From the DHCP options set attached to your virtual private cloud (VPC), set the domain-name-servers option to the IP address of your DNS name server. For more information, see DHCP options sets.

  Note

  The domain-name-servers option accepts up to four values, but your Amazon RDS DB instance uses only the first value.

• Ensure that your DNS server can resolve all lookup queries, including public DNS names, Amazon EC2 private DNS names, and customer-specific DNS names. If the outbound network traffic contains any DNS lookups that your DNS server can't handle, your DNS server must have appropriate upstream DNS providers configured.

• Configure your DNS server to produce User Datagram Protocol (UDP) responses of 512 bytes or less.

• Configure your DNS server to produce Transmission Control Protocol (TCP) responses of 1024 bytes or less.

• Configure your DNS server to allow inbound traffic from your Amazon RDS DB instances over port 53. If your DNS server is in an Amazon VPC, the VPC must have a security group that contains inbound rules that permit UDP and TCP traffic on port 53. If your DNS server is not in an Amazon VPC, it must have appropriate firewall allow-listing to permit UDP and TCP inbound traffic on port 53.

  For more information, see Security groups for your VPC and Adding and removing rules.

• Configure the VPC of your Amazon RDS DB instance to allow outbound traffic over port 53. Your VPC must have a security group that contains outbound rules that allow UDP and TCP traffic on port 53.

  For more information, see Security groups for your VPC and Adding and removing rules.

• The routing path between the Amazon RDS DB instance and the DNS server has to be configured correctly to allow DNS traffic.

  • If the Amazon RDS DB instance and the DNS server are not in the same VPC, a peering connection has to be set up between them. For more information, see What is VPC peering?

Document ConventionsAdministering your Oracle DB instanceDisconnecting a sessionDid this page help you? - Yes

Thanks for letting us know we're doing a good job!

If you've got a moment, please tell us what we did right so we can do more of it.

Did this page help you? - No

Thanks for letting us know this page needs work. We're sorry we let you down.

If you've got a moment, please tell us how we can make the documentation better.