Amazon RDS connection guide
AWS RDS PostgreSQL Connection String
Build an RDS for PostgreSQL URI from the instance endpoint, database name, user, and SSL settings.
Use the connection value generated by Amazon RDS, keep it in an environment variable, and test it before changing application code. The URI shape below is a template, not a credential to paste unchanged.
- URI scheme
- postgresql://
- Default PostgreSQL port
- 5432
- Credential handling
- Environment variable or secret manager
- First test
- psql "$DATABASE_URL" -c "show ssl;"
Connection string template
postgresql://DB_USER:PASSWORD@INSTANCE.abcdefg.REGION.rds.amazonaws.com:5432/DB_NAME?sslmode=requireReplace every uppercase placeholder. Percent-encode reserved characters in URI usernames and passwords.
Where to get the Amazon RDS values
In the RDS console, open the database and copy the endpoint and port from Connectivity & security. The endpoint is a hostname, not a URL; add the PostgreSQL scheme, credentials, and database name.
The failure mode worth checking first
A correct URI still fails if the security group does not allow your source IP or the instance is private. Do not make a production database publicly accessible just to fix a local connection; use a VPN, bastion, or SSH tunnel.
Test the connection
Run a cheap read-only command before migrations or application startup. That separates network, TLS, and authentication errors from framework configuration problems.
Connection check
psql "$DATABASE_URL" -c "show ssl;"Open it in PostgresGUI
Paste the PostgreSQL URI into PostgresGUI or enter the same host, port, database, user, password, and SSL mode as separate fields. A desktop connection is useful for checking the visible schemas and role permissions before debugging the application layer.
Questions that come up
Should the connection string be committed to Git?
No. Commit an example with placeholders and load the real value from an environment variable or secret manager.
Why does a password with @ or # break the URI?
Those characters have meaning inside a URL. Percent-encode the username and password, or use a structured connection API instead of assembling a URL by hand.
Do I need sslmode=require?
Most hosted PostgreSQL services require TLS. For strict certificate and hostname verification, use sslmode=verify-full with the provider's trusted root certificate when the client supports it.