Can AWS Verified Access be used for accessing RDS cluster in a private VPC without using VPN

0

Is there a way to leverage AWS Verified Access to enable developers to connect to RDS cluster from their local machine without using VPN? I have done quite some research but haven't found a way to do it yet. If there's another way to accomplish this without VPN I am all ears :)

We are using Aurora Serverless v2 so DataApi is not available to us sadly

2 Answers
0

Hiya, try this:

Create a Verified Access group and policy. The group will define the users who are allowed to access the RDS cluster, and the policy will define the conditions that must be met for access to be granted. Create a Verified Access endpoint for the RDS cluster. The endpoint will be the address that developers will use to connect to the cluster. Configure the RDS cluster to accept connections from the Verified Access endpoint. Configure the developers' machines to connect to the Verified Access endpoint.

profile picture
answered 8 months ago
0

Hi, There isn't a direct way to leverage AWS Verified Access to connect to an RDS cluster from a local machine without using a VPN. The quick and easy method is using SSH Tunneling via a bastion. Please refer to the document: https://repost.aws/knowledge-center/rds-connect-using-bastion-host-linux If you would like trace the user activity for security purposes, you can enable database auditing.

Joseph
answered 8 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions