AWS IP ranges and security

Question

Hey Guys,

My Elastic beanstalk, app connects to external database ( a third party database).  and they were allowing my aws ip range.  Currently the third-party had their audit, and given recent ransomeware and hackings incidents , the third-party is not comfortable opening the whole  multiple ranges..

Q.1) How do I handle the situation? Obvious limitation is their database is critical and can not be moved to AWS/amazon infra.

Q2.) I have dedicated Ip, why my EC2 instance not use it to connect to 3rd party ? ( they are in same us-east location)

Q3.) Any ip I can buy to limit all connection to their db is form 1 or 2 ip address?

Any other solution that I might not have think of , feel free to opine.

Thanks!

Vivek · Answer

Thank you, So I have created a NAT with the Elastic IP and subnet,  how do I now make sure that my outbound traffic is though this NAT gateway?

Riku_Kobayashi · Answer

Hello.

Does the external database communicate over a public network?  
When communicating via a public network, you can place a NAT Gateway in the VPC and fix the IP address, so that the database only allows the IP address of the NAT Gateway.  
https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat-gateway.html

AWS IP ranges and security

Add your answer

Relevant content