How can I connect to a private Amazon RDS instance from local system through EC2 as a bastion host?

[Music] hello i'm karthika a cloud support engineer here at the aws office in dallas in this video i will walk you through how to connect from local mission to an amazon rds instance running in a private subnet through the bastion server in amazon ec2 you can use this method to connect to the database instance and amazon rds or amazon aurora or aurora serverless to accomplish this first let's create an ec2 instance which is going to act as an intermediate server in this setup i'll walk you through network security configuration such as security group for other configuration you can choose the setting that is more suitable for you general ec2 instance configuration open the amazon ec2 console from the console dashboard choose launch instance on the choose an amazon mission image page select an hvm version of amazon linux 2 marked free tire eligible on the choose an instance type page select the t2 micro type as this instance type is eligible for the free tire choose review and launch to let the wizard complete the other configuration settings for you ec2 instance amazon vpc setup on the review instance launch page under instance details you will see the details of your instance choose edit instant details under network make sure to select the vpc that is same as your rds instance vpc under subnet make sure to select the subnet that has internet gateway included in its routing table note that the internet gateway can be added even after the creation of the ec2 instance then choose review and launch easy to instance security group setup on the review instance launch page under security groups you will see that the wizard created and selected a security group for you choose edit security groups choose add rule and include the below details type will be the custom tcp row protocol tcp port range 22 source local mission public ip address the source ip by default is open to all but for security purpose add your particular local ipublic ip address then choose review and launch on the review instance launch page choose launch after this setup is done you can proceed with rds instant security group setup assuming that the rds instance is already launched all that's needed here is to add the private ip address of the ec2 instance in the security group of the rds instance rds instance security group setup open the amazon rds console from the console dashboard choose the rds instance under connectivity and security choose a security group linked when the security group console opens choose its desired security group if it is not already selected choose inbound choose add rule and then include the below details type custom tcp rule protocol tcp port range port of your rds instance source easy to private ip address choose save this setup on the security group is enough to allow easy to instance private ip as long as the ec2 instance vpc is same as the rds instance vpc there is no need to edit the routing table that is used by the rds instance if the vpc is different between rds and ec2 then make sure to setup vpc pairing to allow connection between those vcs let's see an example with the mysql client about how to connect your rds instance from local via bastian server the method to connect to the rds instance differ based on the client that you are using in this example i am using mysql workbench client to show how to connect using the bastian server start a new connection and select standard tcp ip over ssh for connection method all the ssh details are related to the ec2 instance ssh host name public dns name of the ec2 instance is such a user name enter ec2 i1 user this is the username for all the easy to linux mission ssh key file select the private key that is used during the creation of the ec2 instance all mysql details are related to the rds instance mysql host name rds instance endpoint mysql server port 3306 or the custom port that you used user name enter the master username of the rds instance password enter the master password of the rds instance after entering all the details choose test connection when the connection is successful then enter the connection name save this connection for future use thank you for watching and happy cloud computing from all of us here at aws you

Channel: Amazon Web Services

Views: 70,591

Keywords: AWS, Amazon Web Services, Cloud, AWS Cloud, Cloud Computing, AWS Knowledge Center Videos

Id: ypWzL3PdKx0

Length: 5min 53sec (353 seconds)

Published: Mon Sep 28 2020