amazon-web-services - AWS Cloudformation 模板 Oracle DB 选项组

Question

我在创建 Oracle RDS 实例时尝试应用选项组。我正在尝试通过选项组设置 Oracle native 网络加密。我们已经进行了一些设置，但我试图动态创建一个选项组并添加设置。我在这里读到这篇文章，说它不受支持。现在还是这样吗？ Article on StackOverflow

如果我可以在创建堆栈时动态创建它们，我会收到一条错误消息，指出需要资源部分。我在这里缺少什么？

AWSTemplateFormatVersion: 2010-09-09
OracleRDSOptionGroup:
  Type: AWS::RDS::OptionGroup
  Properties: 
    OptionGroupDescription: "Allows NNE"
    EngineName: oracle-ee-cdb
    MajorEngineVersion: "19"
    OptionConfigurations: 
      -
        OptionName: NATIVE_NETWORK_ENCRYPTION
        OptionSettings:
           -
             Name: SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER
             Value: "SHA1,MD5"
           - 
             Name: SQLNET.ENCRYPTION_SERVER
             Value: "REQUIRED"
           -    
             Name: SQLNET.ENCRYPTION_TYPES_SERVER
             Value: "AES256"
           -
             Name: SQLNET.CRYPTO_CHECKSUM_SERVER
             Value: "REQUIRED"

Answer 1

resource section is needed.

好吧，你需要 Resources部分:

AWSTemplateFormatVersion: 2010-09-09
Resources:
    OracleRDSOptionGroup:
    Type: AWS::RDS::OptionGroup
    Properties: 
        OptionGroupDescription: "Allows NNE"
        EngineName: oracle-ee-cdb
        MajorEngineVersion: "19"
        OptionConfigurations: 
        -
            OptionName: NATIVE_NETWORK_ENCRYPTION
            OptionSettings:
            -
                Name: SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER
                Value: "SHA1,MD5"
            - 
                Name: SQLNET.ENCRYPTION_SERVER
                Value: "REQUIRED"
            -    
                Name: SQLNET.ENCRYPTION_TYPES_SERVER
                Value: "AES256"
            -
                Name: SQLNET.CRYPTO_CHECKSUM_SERVER
                Value: "REQUIRED"