Unauthorized access to AWS database

0

Some unauthorized person has been trying to login to login to my aws database in the past few months. In the log I can see Connection denied message with the username. He/she has been sending login requests at an extremely frequent rate. I believe this is the cause for some connection failures I'm experiencing between my application and the database. Can someone suggest me a solution for this?

demandé il y a 9 mois181 vues
1 réponse
0

Hello.

Am I correct in understanding that you are using RDS for the database?
Also, does RDS have public access enabled?
If public access is enabled, we recommend disabling it.
If you can identify the IP address of the access source, you can consider preventing it with security groups or network ACLs.
Also, although it is unclear whether this will directly resolve the issue, I think it would be a good idea to change the DB user name and password.
https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_VPC.WorkingWithRDSInstanceinaVPC.html#USER_VPC.Hiding

Also, if the unauthorized access is via a web application, you may want to consider using something like AWS WAF.
To use AWS WAF, you will need ALB and CloudFront, so please set them up if you want to use them.
https://docs.aws.amazon.com/waf/latest/developerguide/getting-started.html

profile picture
EXPERT
répondu il y a 9 mois

Vous n'êtes pas connecté. Se connecter pour publier une réponse.

Une bonne réponse répond clairement à la question, contient des commentaires constructifs et encourage le développement professionnel de la personne qui pose la question.

Instructions pour répondre aux questions