Connect to Amazon RDS for MySQL

Ensure that you:

• Review how OCI GoldenGate connects to your source and targets.
• Depending on your Oracle GoldenGate version:
  • Prepare and configure the system for Oracle GoldenGate 23ai
  • Prepare and configure the system for Oracle GoldenGate 21c.
• Configure the required policies to enable secure Vault and Secrets access, such as use secrets, use vaults, and read secret-bundles. For more information, see Minimum recommended policies.

1. From the OCI GoldenGate Overview page, click Connections.
   You can also click Create Connection under the Get started section and skip to step 3.
2. On the Connections page, click Create Connection.
3. On the Create Connection page, complete the fields as follows:
   1. For Name, enter a name for the connection.
   2. (Optional) For Description, enter a description that helps you distinguish this connection from others.
   3. If creating this deployment for GoldenGate on Multicloud, select your Subscription.
      1. From the Compartment dropdown, select the compartment in which the Resource Anchor resides.
      2. Select the Multicloud partner region.
      3. Select your Partner availability zone. The available options populate based on the selected Multicloud partner region.
   4. For Compartment, select the compartment in which to create the connection.
   5. From the Type dropdown, select Amazon RDS for MySQL.
   6. For Database name, enter the database name.
   7. Enter the database host and port in the Host and Port fields.
      Note
      
      If you enter a private IP, then OCI GoldenGate rewrites the private IP in the format, ip-10-0-0-0.ociggsvc.oracle.vcn.com.
   8. For Database username, enter the Amazon RDS for MySQL user.
      Note
      
      Add double quotes around the username if it contains an @ symbol ("myuser@myserver", for example).
   9. Select the Database user password secret. If located in a different compartment, use the dropdown to change compartments.
      Note
      
      

      • Secrets are credentials such as passwords, certificates, SSH keys, or authentication tokens that you use with OCI services. To create a secret, see Creating a secret. Ensure that you:
        • Select Manual secret generation.
        • Paste the credentials into Secret contents.
      • If you prefer not to use password secrets, ensure that you deselect Use secrets in vault in the Security section under Advanced Options, located at the bottom of this form.
   10. For Security protocol, select from the following options:
       • Plain
       • TLS, and then select the SSL mode
       • MTLS, and then select the SSL mode
   11. Expand Show advanced options. You can configure the following options:
       • Security
         • Deselect Use vault secrets you prefer not to use password secrets for this connection. If not selected:
           • Select Use Oracle-managed encryption key to leave all encryption key management to Oracle.
           • Select Use customer-managed encryption key to select a specific encryption key stored in your OCI Vault to encrypt your connection credentials.
       • Network connectivity
         • Shared endpoint, to share an endpoint with the assigned deployment. You must allow connectivity from the deployment's ingress IP.
         • Dedicated endpoint, for network traffic through a dedicated endpoint in the assigned subnet in your VCN. You must allow connectivity from this connection's ingress IPs.
           Note
           
           

           • If a dedicated connection remains unassigned for seven days, then the service converts it to a shared connection.
           • Learn more about Oracle GoldenGate connectivity.
       • Connection attributes: Add optional attributes to the connection.
       • Security attributes: Add security attributes to control access to this connection using Zero Trust Packet Routing (ZPR).
       • Tags: Add tags to organize your resources.
4. Click Create.