Note: To connect one or more EC2 instances to an RDS database automatically, see Automatically connect an EC2 instance to an RDS database.ġ. Configure the RDS DB instance's security groups By default, the source IP address is open to all, but you can restrict access to your local public IP address.ġ1. Source: Enter the IP address of your local machine. Choose Next: Configure Security Group, choose Add Rule, and then enter the following: Type: Enter Custom TCP Rule. Choose Next: Add Tags, and then add tags as needed.ĩ. Choose Next: Add Storage, and then modify storage as needed.Ĩ. For Auto-assign public IP, make sure that Enable is selected.ħ. If you don't already have an internet gateway, then you can add it to the subnet after the EC2 instance is created.Ħ. For Subnet, select the subnet that has an internet gateway in its routing table. For Network, choose the VPC that the RDS DB instance uses.ĥ. Choose an instance type, and then choose Next: Configure Instance Details.Ĥ. Open the Amazon EC2 console, and then choose Launch instance.ģ. The instance has security groups set up for an EC2 instance. The following example configuration is for an Amazon RDS for MySQL instance that's in an Amazon Virtual Private Cloud (Amazon VPC). For more information, see Example routing options. For example, when you add the internet gateway, add only the required CIDR range in the routing table for the destination. You can also restrict the route scope of your internet gateway to use a smaller range instead of 0.0.0.0/0. However, you can restrict the network access control list (network ACL) of subnets to make the connection more secure. The following example configuration uses security groups to restrict access. If you can't use these options, then use a bastion host. Important: To connect to a private Amazon RDS or Amazon Aurora DB instance, it's a best practice to use a VPN or AWS Direct Connect. Connect to the RDS DB instance from your local machine. Configure the RDS DB instance's security groups.ģ. Launch and configure your EC2 instance, and then configure the network setting of the instance.Ģ. To use an Amazon EC2 instance as a jump server to connect to a private Amazon RDS DB instance from a local machine, follow these steps:ġ.

Ssh bastion host