# DatabaseProxyEndpointProps

Construction properties for a DatabaseProxyEndpoint.

Extends: DatabaseProxyEndpointProps
Extends: DatabaseProxyEndpointOptions
Used as props by: DatabaseProxyEndpoint

- Source: [`aws-rds/lib/proxy-endpoint.ts`](https://github.com/aws/aws-cdk/blob/v2.275.0/packages/aws-cdk-lib/aws-rds/lib/proxy-endpoint.ts#L78)
- Type last changed: v2.235.0 · 15 Jan 2026

## Example

```ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_ec2 as ec2 } from 'aws-cdk-lib';
import { aws_rds as rds } from 'aws-cdk-lib';
import { aws_rds as interfaces_rds } from 'aws-cdk-lib/interfaces';

declare const dBProxyRef: interfaces_rds.IDBProxyRef;
declare const securityGroup: ec2.SecurityGroup;
declare const subnet: ec2.Subnet;
declare const subnetFilter: ec2.SubnetFilter;
declare const vpc: ec2.Vpc;
const databaseProxyEndpointProps: rds.DatabaseProxyEndpointProps = {
  dbProxy: dBProxyRef,
  vpc: vpc,

  // the properties below are optional
  dbProxyEndpointName: 'dbProxyEndpointName',
  securityGroups: [securityGroup],
  targetRole: rds.ProxyEndpointTargetRole.READ_WRITE,
  vpcSubnets: {
    availabilityZones: ['availabilityZones'],
    onePerAz: false,
    subnetFilters: [subnetFilter],
    subnetGroupName: 'subnetGroupName',
    subnets: [subnet],
    subnetType: ec2.SubnetType.PRIVATE_ISOLATED,
  },
};
```

## Properties

- `dbProxy`: [IDBProxyRef](/cdk/api/v2/docs/aws-cdk-lib.interfaces.aws_rds.IDBProxyRef.html) (required) — The DB proxy associated with the DB proxy endpoint.

- `dbProxyEndpointName`: string — The name of the DB proxy endpoint.

  **Default:** a CDK generated name

- `securityGroups`: [ISecurityGroup](/cdk/api/v2/docs/aws-cdk-lib.aws_ec2.ISecurityGroup.html)[] — The VPC security groups to associate with the new proxy endpoint.

  **Default:** Default security group for the VPC

- `targetRole`: [ProxyEndpointTargetRole](/cdk/api/v2/docs/aws-cdk-lib.aws_rds.ProxyEndpointTargetRole.html) — A value that indicates whether the DB proxy endpoint can be used for read/write or read-only operations.

  **Default:** ProxyEndpointTargetRole.READ_WRITE

- `vpc`: [IVpc](/cdk/api/v2/docs/aws-cdk-lib.aws_ec2.IVpc.html) (required) — The VPC of the DB proxy endpoint.

- `vpcSubnets`: [SubnetSelection](/cdk/api/v2/docs/aws-cdk-lib.aws_ec2.SubnetSelection.html) — The subnets of DB proxy endpoint.

  **Default:** the VPC default strategy if not specified.