---
type: resource-type
title: DBProxy
description: aws resource type AWS::RDS::DBProxy
name: DBProxy
lexicon: aws
resource_type: AWS::RDS::DBProxy
---
`AWS::RDS::DBProxy`, a resource type of the aws lexicon.

## Properties

- `DBProxyName` (`string`, required): The identifier for the proxy. This name must be unique for all proxies owned by your AWS account in the specified AWS Region.
- `EngineFamily` (`"MYSQL" | "POSTGRESQL" | "SQLSERVER"`, required): The kinds of databases that the proxy can connect to.
- `RoleArn` (`string`, required): The Amazon Resource Name (ARN) of the IAM role that the proxy uses to access secrets in AWS Secrets Manager.
- `VpcSubnetIds` (`string[]`, required): VPC subnet IDs to associate with the new proxy.
- `Auth` (`DBProxy_AuthFormat[]`, optional): The authorization mechanism that the proxy uses.
- `DBProxyArn` (`string`, optional): The Amazon Resource Name (ARN) for the proxy.
- `DebugLogging` (`boolean`, optional): Whether the proxy includes detailed information about SQL statements in its logs.
- `DefaultAuthScheme` (`"IAM_AUTH" | "NONE"`, optional): The default authentication scheme that the proxy uses for client connections to the proxy and connections from the proxy to the underlying database.
- `Endpoint` (`string`, optional): The endpoint that you can use to connect to the proxy. You include the endpoint value in the connection string for a database client application.
- `EndpointNetworkType` (`"DUAL" | "IPV4" | "IPV6"`, optional): The network type of the DB proxy endpoint. The network type determines the IP version that the proxy endpoint supports.
- `IdleClientTimeout` (`number`, optional): The number of seconds that a connection to the proxy can be inactive before the proxy disconnects it.
- `RequireTLS` (`boolean`, optional): A Boolean parameter that specifies whether Transport Layer Security (TLS) encryption is required for connections to the proxy.
- `Tags` (`DBProxy_TagFormat[]`, optional): An optional set of key-value pairs to associate arbitrary data of your choosing with the proxy.
- `TargetConnectionNetworkType` (`"IPV4" | "IPV6"`, optional): The network type that the proxy uses to connect to the target database. The network type determines the IP version that the proxy uses for connections to the database.
- `VpcId` (`string`, optional): VPC ID to associate with the new DB proxy.
- `VpcSecurityGroupIds` (`string[]`, optional): VPC security group IDs to associate with the new proxy.

## Attributes

- `DBProxyArn`
- `Endpoint`
- `VpcId`

## Governed by

- [WAW041](/rules/WAW041.md): RDS Proxy does not require TLS for client connections