Scaleway Managed Database
RDB PostgreSQL/MySQL with HA, private-network endpoint, users, and ACLs.
Verification
Static-verifiedPassed: validated and lint-clean (provider-schema-validated for AWS/Azure/GCP; Terraform-language lint elsewhere).
Conformance
- Static validation (fmt · validate · tflint)
- No applicable security policies for this provider
- Plan tests (mocked: validation rules · outputs)
Provenance
- SHA-256 checksum
- Cosign signature
Functional
- Live test pending (no cloud run yet)
Last verified 2026-06-28 · how we verify
Verify this download
cosign · sha-256Don't take our word for it. Every release is signed with cosign - check the bytes against our pinned public key before you trust them.
# 1. Our pinned public key - fetch once, trust out-of-band
curl -O https://www.iac-bazaar.com/cosign.pub
# 2. This module's Sigstore bundle
curl -o scaleway-rdb-instance-1.0.0.sigstore.json \
https://www.iac-bazaar.com/api/artifacts/scaleway-rdb-instance/signature
# 3. Verify the tarball you downloaded
cosign verify-blob \
--key cosign.pub \
--bundle scaleway-rdb-instance-1.0.0.sigstore.json \
scaleway-rdb-instance-1.0.0.tar.gz
# → Verified OK
# 4. (optional) confirm the checksum too
echo "99c90a8b8dcfc20b7091e6178569d709da6a6b0260c85d73ff39b819a658a75b scaleway-rdb-instance-1.0.0.tar.gz" | sha256sum -cUse it from the registry
terraform · opentofumodule "rdb_instance" {
source = "www.iac-bazaar.com/iac-bazaar/scaleway-rdb-instance/scaleway"
version = "1.0.0"
}Needs a registry token from /account/tokens. The module itself is free; the account is what identifies you. Full setup: registry docs.
Cite it in your README
badge · attributionPaste this beside the module in the repository that uses it. The badge is rendered from this artifact's verification record, so it reads static-verified because the record says so, and the link lands on this page.
[](https://www.iac-bazaar.com/catalog/scaleway-rdb-instance?utm_source=syndication&utm_medium=readme&utm_campaign=artifact)
Terraform module 1.0.0, static-verified on IaC Bazaar: [Scaleway Managed Database](https://www.iac-bazaar.com/catalog/scaleway-rdb-instance?utm_source=syndication&utm_medium=readme&utm_campaign=artifact)
```hcl
module "rdb_instance" {
source = "www.iac-bazaar.com/iac-bazaar/scaleway-rdb-instance/scaleway"
version = "1.0.0"
}
```Preview:
Inputs & outputs
Create a free account to read this module's contract
The declared contract - every input name, type, default and description, plus every output - is shown to signed-in accounts, not to anonymous visitors.
A free account sees the contract of every module in the catalogue. There is no subscription and nothing to buy - the modules are free to download, and they run under Vizier.
Documentation
scaleway-rdb-instance
A Scaleway Managed Database (RDB) instance with an admin user, additional least-privilege users, per-user database privileges, and a default-deny public ACL. Supports PostgreSQL and MySQL engines.
Status: static-validated, live-test pending. Validated with
tofu validate+tflint+checkovagainst thescaleway/scalewayprovider. Not yet applied against a live Scaleway project, so it ships under live-test quarantine.
Design & secure defaults
- Public endpoint closed by default. No ACL rule is created until you list
source CIDRs in
acl_rules; attach aprivate_network_idto reach the instance privately and leave the public ACL empty. - HA by default (
is_ha_cluster = true) on block storage — a precondition rejects the invalid HA + local-lssdcombination. - Backups on with configurable frequency/retention; the managed endpoint
enforces TLS (exported as
certificate). - Least privilege: create app users via
usersand scope them to databases viaprivileges(readonly/readwrite/all/custom/none).
Provider
scaleway/scaleway >= 2.0, < 3.0. Requires Terraform/OpenTofu >= 1.6.
License
Commercial — LicenseRef-IaCBazaar-Commercial. See the IaC Bazaar terms.
Usage code & full reference need an account
The complete copy-paste usage, the full input/output reference, and operational notes are free with an account - shown here and bundled in the download. Sign in and this section fills in.
- Usage
- Key inputs
- Outputs
Related modules
scaleway-redis
A Scaleway Managed Database for Redis cluster attached to your Private Network with no public endpoint (one by name), TLS required (plaintext by name), a password from a secret store never output, an ACL of the ranges that may connect (required), an eviction policy set, and three nodes so the data has three copies (fewer by name).
civo-database
firewall_id is optional and a database without one answers to every address that can reach its endpoint; nodes = 1 is one node whose failure is downtime; and backups are the platform's, not configurable here. Firewall and network required, two nodes (one by name), the password as a sensitive output, and an output that says no backup schedule can be set.
vultr-database
A managed database gets a public hostname and trusted_ips is optional: left empty, any address on the internet may try the password; the backup hour is picked for you; and a plan with no replicas is one node whose failure is downtime. Trusted ranges required (a /0 refused unless accepted), a VPC attachment, one standby by default, both windows set, and the password as a sensitive output.
azure-sql-managed-instance
The public data endpoint turns a private database into one listening on the internet on port 3342; SQL logins put an administrator password in state when Entra-only authentication would remove them entirely; and zone redundancy is off by default. Private, Entra-only with SQL authentication accepted by name, Business Critical across zones, TLS 1.2, and geo-zone-redundant backups.
oci-postgresql
password_type PLAIN_TEXT writes the admin password into the Terraform state and every plan that shows it; storage that is not regionally durable dies with its availability domain; and a DB system created without a management policy takes no backups. Vault secret reference, regionally durable storage, daily backups optionally copied to another region, a read replica, and an NSG on port 5432.
gcp-alloydb
AlloyDB cluster with primary + read-pool instances, PSC connectivity, automated backups and columnar/vector engine flags.