doc-exports/docs/rds/umn/rds_faq_0054.html
Wang , Deng Ke 79b1bc1455 RDS UMN 20221101 version
Reviewed-by: Hasko, Vladimir <vladimir.hasko@t-systems.com>
Co-authored-by: Wang , Deng Ke <wangdengke2@huawei.com>
Co-committed-by: Wang , Deng Ke <wangdengke2@huawei.com>
2023-01-09 10:26:58 +00:00

2.0 KiB

How Do I Configure a Security Group to Enable Access to RDS DB Instances?

  • When you attempt to connect to a DB instance through a private network, check whether the ECS and RDS DB instance are in the same security group.
    • If the ECS and RDS DB instance are in the same security group, they can communicate with each other by default. No security group rules need to be configured.
    • If the ECS and RDS DB instance are in different security groups, you need to configure security group rules for them, separately.
      • RDS DB instance: Configure an inbound rule for the security group with which the DB instance is associated.
      • ECS: The default security group rule allows all outgoing data packets. In this case, you do not need to configure a security rule for the ECS. If not all outbound traffic is allowed in the security group, you need to configure an outbound rule for the ECS.
  • When you attempt to connect to a DB instance through an EIP, you need to configure an inbound rule for the security group associated with the DB instance.