× ADMIN_RESTRICTIONS_LISTENER_CITEBP01
× ADR_BASE_LISTENER_CITEBP01
○ DIAG_ADR_ENABLED_LISTENER_CITEBP01 ⇒sqlnetora.diag_adr_enabled
× LOGGING_LISTENER_CITEBP01
○ INBOUND_CONNECT_TIMEOUT_LISTENER_CITEBP01 ⇒sqlnetora.sqlnet.inbound_connect_timeout
○ TRACE_LEVEL_LISTENER_CITEBP01 ⇒sqlnetora.trace_level_server
× LOG_FILE_NUM_LISTENER_CITEBP01

# (3) oracle ユーザ/SQLネットプロファイル定義(sqlnet.ora)

# 非互換
# ×NAMES.DIRECTORY_PATH (TNSNAMES, EZCONNECT)
# ×ADR_BASE /oralog/db

# オプショングループに登録して使用
# SQLNET.ENCRYPTION_SERVER REQUIRED
# SQLNET.ENCRYPTION_TYPES_SERVER (AES256)

# NATIVE_NETWORK_ENCRYPTION オプションの追加
# https://docs.aws.amazon.com/ja_jp/AmazonRDS/latest/UserGuide/Appendix.Oracle.Options.NetworkEncryption.html

# オプショングループにオプションを追加する
# https://docs.aws.amazon.com/ja_jp/AmazonRDS/latest/UserGuide/USER_WorkingWithOptionGroups.html#:~:text=%E6%97%A2%E5%AD%98%E3%81%AE%E3%82%AA%E3%83%97%E3%82%B7%E3%83%A7%E3%83%B3%E3%82%B0%E3%83%AB%E3%83%BC%E3%83%97%E3%81%AB%E3%82%AA%E3%83%97%E3%82%B7%E3%83%A7%E3%83%B3%E3%82%92%E8%BF%BD%E5%8A%A0%E3%81%A7%E3%81%8D%E3%81%BE%E3%81%99%E3%80%82%E5%BF%85%E8%A6%81%E3%81%AA%E3%82%AA%E3%83%97%E3%82%B7%E3%83%A7%E3%83%B3%E3%82%92%E8%BF%BD%E5%8A%A0%E3%81%97%E3%81%9F%E3%82%89%E3%80%81%E3%81%9D%E3%81%AE%E3%82%AA%E3%83%97%E3%82%B7%E3%83%A7%E3%83%B3%E3%81%8C

TEST-RDS-ORA-OPTION

# aws rds add-option-to-option-group \
# –option-group-name testoptiongroup \
# –options “OptionName=Timezone,OptionSettings=[{Name=TIME_ZONE,Value=America/Los_Angeles}]” \
# –apply-immediately

# SQLNET.ENCRYPTION_SERVER REQUIRED
aws rds add-option-to-option-group \
–option-group-name TEST-RDS-ORA-OPTION \
–options “OptionName=NATIVE_NETWORK_ENCRYPTION,OptionSettings=[{Name=SQLNET.ENCRYPTION_SERVER,Value=REQUIRED}]” \
–apply-immediately

# SQLNET.ENCRYPTION_TYPES_SERVER (AES256)
aws rds add-option-to-option-group \
–option-group-name TEST-RDS-ORA-OPTION \
–options “OptionName=NATIVE_NETWORK_ENCRYPTION,OptionSettings=[{Name=SQLNET.ENCRYPTION_TYPES_SERVER,Value=AES256}]” \
–apply-immediately

# ○SQLNET.INBOUND_CONNECT_TIMEOUT 120
# ○SQLNET.EXPIRE_TIME 10

# SQLNET.INBOUND_CONNECT_TIMEOUT
aws rds modify-db-parameter-group \
–db-parameter-group-name TEST-RDS-ORA-PARAMETER \
–parameters “ParameterName=sqlnetora.sqlnet.inbound_connect_timeout,ParameterValue=120,ApplyMethod=immediate”

range: 0,10-7200

# SQLNET.EXPIRE_TIME
aws rds modify-db-parameter-group \
–db-parameter-group-name TEST-RDS-ORA-PARAMETER \
–parameters “ParameterName=sqlnetora.sqlnet.expire_time,ParameterValue=100000,ApplyMethod=immediate”

An error occurred (InvalidParameterValue) when calling the ModifyDBParameterGroup operation: Value: 100000 is outside of range: 0-1440 for parameter: sqlnetora.sqlnet.expire_time

####################################################################################
●オプショングループ表示
aws rds describe-option-groups \
–query ‘OptionName[*]’

・オプショングループのオプションとオプションの設定を表示
aws rds describe-option-groups –option-group-name test-rds-ora-option-dboption

●オプショングループ削除
aws rds delete-option-group \
–option-group-name test-rds-ora-option-dboption

●オプショングループ設定変更
— Oracle Enterprise Manager Database Control (OEM) 用のポートを変更し、その変更がすぐに適用されるように指定
aws rds add-option-to-option-group \
–option-group-name test-rds-ora-option-dboption \
–options OptionName=OLAP,Port=5432,DBSecurityGroupMemberships=default \
–apply-immediately

●オプショングループへオプション追加
aws rds add-option-to-option-group \
–option-group-name test-rds-ora-option-dboption \
–options OptionName=OLAP \
–apply-immediately

aws rds add-option-to-option-group \
–option-group-name test-rds-ora-option-dboption \
–options OptionName=JVM \
–apply-immediately

●オプショングループからオプションを削除
aws rds remove-option-from-option-group \
–option-group-name test-rds-ora-option-dboption \
–options JVM \
–apply-immediately

####################################################################################
aws rds modify-db-parameter-group \
–db-parameter-group-name TEST-RDS-ORA-PARAMETER \
–parameters “ParameterName=listenerora.sqlnet.inbound_connect_timeout,ParameterValue=7200,ApplyMethod=immediate”

aws rds modify-db-parameter-group \
–db-parameter-group-name TEST-RDS-ORA-PARAMETER \
–parameters “ParameterName=listenerora.sqlnet.inbound_connect_timeout,ParameterValue=7200,ApplyMethod=immediate”

aws rds modify-db-instance \
–db-instance-identifier mydbinstance \
–backup-retention-period 7 \
–deletion-protection \
–no-apply-immediately

####################################################################################
aws rds modify-option-to-option-group \
–option-group-name test-rds-ora-option-dboption \
–options “OptionName=Partitioning,OptionSettings=[{Name=SQLNET.ENCRYPTION_SERVER,Value=REQUIRED}]” \
–apply-immediately