How to access a service with Controlled Network Access from the Auto Scaling Group?


Setup Description:

  1. I have an auto scaling group with one instance inside, but it can scale up to 2 instances.
  2. Each instance in the group should read information from the MongoDB.
  3. The MongoDB has network inbound rules so that, not every IP can access the MongoDB.
  4. When auto scaling group scales, it creates new instance that has random IP generated by AWS. So they have no access to the Mongo DB by default.

Problem: How to make all instances inside auto scaling group to access the Mongo DB without making Mongo DB be accessible to all IPs?

2 Answers
Accepted Answer


Where is Mongo DB managed?
If Mongo DB is installed on EC2, I think there will be no problem just by allowing the EC2 security group of the AutoScaling group in the security group.

If Mongo DB exists on-premises and provides public access, you can fix the IP address by creating a NAT Gateway within the VPC and directing EC2 communication via the NAT Gateway.

If you are accessing on-premises via VPN, I think you can use a method to allow VPC CIDR.

profile picture
answered 24 days ago
  • Thank you! Made it working with NAT gateway ^^

answered 24 days ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions