> ## Documentation Index
> Fetch the complete documentation index at: https://cloud.laravel.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# RDS

> Managed AWS RDS databases (MySQL and Postgres).

## Introduction

Laravel Cloud provides fully managed AWS RDS databases (both MySQL and Postgres) for your application. RDS database clusters support point-in-time recovery (PITR), read replicas, and multiple deployment options.

![](https://mintcdn.com/cloud/MkfTsQSKGENWqY-2/images/rds_attached_environment.png?fit=max\&auto=format\&n=MkfTsQSKGENWqY-2\&q=85\&s=11878a3584041e4a16bf92bfd311b7fb)

> [!NOTE]
>
> RDS databases are available only with [Private Cloud](/docs/private-cloud). If you do not see RDS as an option when creating a database, [contact us](https://cloud.laravel.com/enterprise) to provision Private Cloud in your chosen region.

## Creating RDS databases

To create and attach an RDS database to an environment:

1. Navigate to **Organization > Resources > Databases**
2. Click **+ New database cluster** and fill in the following fields:
   * **Cluster name**: a unique name for your database cluster
   * **Type**: **AWS RDS MySQL 8.4** or **AWS RDS Postgres 18**
   * **Region**: a Private Cloud region
   * **Configuration**: a preset, or your own RDS configuration

> [!NOTE]
>
> Laravel Cloud may take up to 20 minutes to fully create your RDS database. You do not need to stay on the page.

Once created, you can attach the database to any environment in the same region. After you attach a database to an environment, redeploy the environment for the changes to take effect.

[Contact us](https://cloud.laravel.com/enterprise) for information on RDS pricing per region.

## Customizing RDS databases

Laravel Cloud gives you complete control over your RDS configuration. When you create or edit an RDS database cluster, you may control the settings described in the following sections.

### Choosing the right compute size

Laravel Cloud supports both m8g and m7g instances (depending on your desired region). The amount of RAM your RDS database cluster has determines how many simultaneous connections it can support:

| Instance size | MySQL connection limit |
| - | - |
| large (8GiB RAM) | \~630 |
| xlarge (16GiB RAM) | \~1,260 |
| 2xlarge (32GiB RAM) | \~2,520 |
| 4xlarge (64GiB RAM) | \~5,040 |
| 8xlarge (128GiB RAM) | \~10,080 |
| 12xlarge (192GiB RAM) | \~15,120 |
| 16xlarge (256GiB RAM) | \~20,160 |

You can update your compute size at any point. Changing the compute size restarts the instance and causes a short period of downtime. On a Multi-AZ deployment, applying the change triggers a failover to the standby instance, which typically takes 60 to 120 seconds.

### Provisioning storage

You may provision from 20GB up to 1,000GB of storage on your RDS database cluster. While you can increase this value at any point, **you can never decrease it**.

### Enabling public endpoint

By default, RDS database clusters on Laravel Cloud are not publicly accessible.

To enable public access, enable the public endpoint in your RDS database cluster settings. You can change this setting at any time.

### Picking a maintenance window

AWS may occasionally need to perform maintenance on your RDS instance. Maintenance may cause downtime.

You can control your scheduled maintenance window by clicking **Edit settings > Maintenance window** and picking a 30-minute slot. If you don't pick a specific time slot, AWS performs those updates during the default time slot for your region.

### Selecting a deployment option

Laravel Cloud supports the following RDS deployment options:

* **Single-AZ, 1 instance**. One DB instance in a single availability zone. Best for development or non-critical workloads.
* **Single-AZ, with read replicas**. One primary instance plus up to 15 read replicas for read-heavy workloads.
* **Multi-AZ, 2 instances**. Two instances in different availability zones for higher availability. AWS automatically fails over to the standby if the primary fails.

![](https://mintcdn.com/cloud/MkfTsQSKGENWqY-2/images/rds_single_az_read_replicas.png?fit=max\&auto=format\&n=MkfTsQSKGENWqY-2\&q=85\&s=f710bacfa53d4693fcd16707312f63bf)

> [!NOTE]
>
> Using read replicas requires enabling point-in-time recovery (PITR) with a retention period of at least 1 day.

## Connecting to database clusters

### From your application

When you attach a database to an environment, Laravel Cloud automatically injects database connection environment variables, including `DB_HOST`, `DB_USERNAME`, `DB_PASSWORD`, and `DB_DATABASE`. You may view these variables under **Environment > Settings > General > Injected variables**.

### From your local machine

To connect to your database from your local machine, navigate to **Organization > Resources > Databases**, click your RDS database cluster, and click **View credentials** at the top of the page. Make sure your [public endpoint is enabled](#enabling-public-endpoint). In the credentials dialog, use the **Open in database client** button in the **Deeplink** field to open your database in a management client like TablePlus. You can also connect manually with the provided credentials.

![](https://mintcdn.com/cloud/52IA0MrcdN0kBtGa/images/rds_credentials.png?fit=max\&auto=format\&n=52IA0MrcdN0kBtGa\&q=85\&s=e31802891440285aebb7b27aae15628c)

### SSL connections

RDS public endpoints present a certificate issued by a public certificate authority (Let's Encrypt), so your client can verify the server's identity using your operating system's built-in CA bundle. You do not need to download a certificate.

Traffic is encrypted between your client and Laravel Cloud's proxy layer. The proxy's connection to the underlying RDS database runs within Laravel Cloud's private network, and Laravel Cloud does not encrypt it separately.

**RDS MySQL**

Laravel applications should set the `MYSQL_ATTR_SSL_CA` [environment variable](/docs/environments#environment-variables), which Laravel passes to PDO (`Pdo\Mysql::ATTR_SSL_CA` on PHP 8.4 and later):

```ini theme={null}
MYSQL_ATTR_SSL_CA="/etc/ssl/certs/ca-certificates.crt"
```

To verify the server's identity from the `mysql` client, connect with `VERIFY_IDENTITY` mode and point `--ssl-ca` at your system CA bundle:

```bash theme={null}
mysql --host=<host> --port=<port> --user=<username> --password \
  --ssl-mode=VERIFY_IDENTITY \
  --ssl-ca=/etc/ssl/certs/ca-certificates.crt
```

**RDS Postgres**

To verify the server's identity from the `psql` client (libpq 16 and later), connect with `sslmode=verify-full` and the system trust store:

```bash theme={null}
psql "host=<host> port=<port> user=<username> dbname=<database> sslmode=verify-full sslrootcert=system"
```

## Database users

Laravel Cloud creates every RDS database cluster with a default user and injects that user's credentials into your environment as the `DB_USERNAME` and `DB_PASSWORD` [environment variables](/docs/environments#environment-variables). You may also create additional users with their own credentials and access level. For example, you might create a read-only user for a reporting tool or a scoped user for a background service. RDS MySQL, RDS Postgres, and [Laravel MySQL](/docs/resources/databases/laravel-mysql) clusters all support database users.

### Creating a database user

To create a new database user:

1. Navigate to **Organization > Resources > Databases** and click the database cluster.
2. In the **Database users** section, click **New user**.
3. Configure the user:
   * **Username**: a unique username for the user
   * **Permission**: **Read-only** or **Read-write**
   * **Access** (optional): the specific databases within the cluster that the user can reach
4. Click **Create database user**.

You provide the username, and Laravel Cloud generates a secure password and displays it after creating the user. Copy the password and store it somewhere safe, because it grants access to your database.

> [!NOTE]
>
> You cannot edit or delete the default user that Laravel Cloud injects into your environment.

### Read-only vs. read-write access

* **Read-only** users may query data but cannot insert, update, or delete records or modify the schema. Read-only access is a good fit for reporting dashboards or teammates who need only to inspect data.
* **Read-write** users have full read and write access to the schemas they are scoped to.

## Database backups

To configure backups for your RDS database cluster:

1. Navigate to **Organization > Resources > Databases**.
2. Click your RDS database cluster.
3. In the **Backups** section, click **Settings**.
4. Enable the **Backups** toggle and configure **Backup retention**.
5. Click **Update** to save your settings.

Laravel Cloud supports both point-in-time recovery (PITR) and manual snapshots.

### Point-in-time recovery (PITR)

Point-in-time recovery (PITR) combines daily snapshots with continuous transaction logging to protect your data. With PITR, you can restore your database to any specific second within your retention period (up to 30 days).

To adjust the PITR retention period, click **Settings** in your cluster's **Backups** section, change **Backup retention**, and click **Update**.

### Manual snapshots

To take a manual snapshot, click **New backup** in your database cluster's **Backups** section, provide a name and an optional description, and click **Create backup**. Laravel Cloud keeps manual snapshots until you delete them, independent of the PITR retention period.

![](https://mintcdn.com/cloud/52IA0MrcdN0kBtGa/images/rds_backup_settings.png?fit=max\&auto=format\&n=52IA0MrcdN0kBtGa\&q=85\&s=a2ad12dc69f6b523d6d51cc92bfdf6ec)

[Contact us](https://cloud.laravel.com/enterprise) for information on RDS storage and backup costs.

## Restoring a database

To restore an RDS database from a snapshot, navigate to **Organization > Resources > Databases** and click your RDS database cluster. In the **Backups** section, find your desired backup, click **...**, and select **Restore**. Enter a name for the new cluster and click **Restore backup** to confirm.

If you have PITR enabled, you can also restore an RDS database from a specific point in time. Click **Restore point-in-time** in the **Backups** section and choose a precise date and time to recover from.

In both cases, restoring a database creates a new database cluster and leaves the original cluster untouched. After restoring, you have two database clusters, the original and the restored version. You can then detach the original database from your environment, attach the corresponding database from the restored cluster, and delete the original cluster.

## Monitoring RDS performance

To view metrics such as CPU, memory, write throughput, and storage for your RDS database cluster, navigate to **Organization > Resources > Databases**, click your database cluster, and review the **Metrics** section. Use the time range selector to adjust the period shown.

If you have read replicas enabled, use the instance selector in the **Metrics** section to choose **Primary** or an individual **Replica**.