Granular per-instance access in an Aurora DB cluster
We have an Aurora DB cluster with one writer instance and a couple of read replicas. According to AWS documentation it's only possible to change security groups for the cluster at whole. Indeed, when we tried to change the group for one of our read replicas that should have less strict access rules, it affected all instances in the cluster. Does anyone know if there's a way (possibly not so direct one) to assign an additional security group to a certain replica in the cluster? Help is much appreciated, thanks!
Hi there, from the case notes I understand you want to assign an additional security group to one of the read replica in the cluster. An Amazon Aurora DB cluster consists of one or more DB instances and a cluster volume that manages the data for those DB instances. I did it on my end and it is possible to add additional security groups within the same VPC ,but it is not possible to assign security groups and not affect all your instances.A VPC can have multiple security groups and help in restricting certain IP ranges. I have provided you with additional documentation under the reference section. I hope this was helpful! Reference [1]https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Aurora.Overview.Security.html
Relevant questions
Aurora cluster maintenance window and minor version upgrades
asked 6 months agoHow to change RDS instance type in Aurora cluster without downtime?
Accepted Answerasked 3 months agocreate simple RDS Aurora instance
asked 4 months agoHow to ensure replica is in sync between AWS RDS PSQL primary DB and Aurora RDS PSQL replica cluster?
asked a month agoRDS Postgresql migrate to Aurora Postgresql. Not showing "Aurora read replica" & "Migrate snapshot" options.
Accepted Answerasked 6 months agoCan I failback an Aurora DB cluster to its original Region after a cross-Region failover?
Accepted Answerasked 2 years agoadd new DB inside aurora cluster
Accepted Answerasked 5 months agoGranular per-instance access in an Aurora DB cluster
asked 2 months agoUse RDS Postgres Replicas as a cluster
Accepted Answerasked 5 months agoMajor Version Upgrades in Aurora Cluster With Replicas - Can it be done in batches ?
Accepted Answerasked 5 months ago