create db

Spin up a private Postgres RDS instance. Connection URL lands in a utopia secret — the password is never printed.

awsutopia create db postgres <name> [--size small] [--dry-run] [--json]

awsutopia create db postgres app --size small
# secret stored at /utopia/<project>/<env>/db-app
# password is NOT in the CLI output

What you'll get

• RDS Postgres in the default VPC (PubliclyAccessible=false)
• Encrypted storage + 7-day automated backups
• Security group: port 5432 from the VPC CIDR only (not 0.0.0.0/0)
• Master password generated and stored as SSM SecureString db-<name>
• Utopia tags + a static cost hint

Flag	Default	Notes
postgres	required	Only engine for now
--size	small	small → db.t4g.micro
--dry-run	off	Plan only

Secrets

Use awsutopia secret get db-<name> (redacted) if you need the path. Prefer db connect --via <server> over copying passwords around. Don’t casually --reveal DB passwords.

Next

db connect · destroy db