Seeking Alternative Architectures for Accessing Private Databases from Local Machines

Hello,

I am currently working on an architecture that allows access to private IPs or databases from local machines. This is meant as a temporary solution until our company VPN is fully operational and we can use that. So now we are are exploring temporary solutions.

We have considered using a bastion host, which could be either an EC2 or ECS instance. We also looked into AWS Cloud9 as a managed instance, but unfortunately, it's being discontinued. Maybe AWS Workspaces can provide a solution?

Currently our eyes are set on this: https://dev.to/aws-builders/access-your-aws-database-using-local-port-forwarding-on-your-ecsfargate-container-4nk4 So we use SSM and ECS as a bastion. The advantage of this approach is the utilization of AWS CLI SSO and the AWS SSM start session for port forwarding. Once the SSM session with port forwarding is active, we can access our private databases locally.

We are wondering if we might have overlooked any other potential solutions that meet the following requirements:

• No VPN
• Access to private DBs from local machines
• No EC2 usage

Any suggestions or alternative architectures would be greatly appreciated!

Thank you!