Connect a Lambda function to an S3 bucket while being connected to a VPC to make queries to a private RDS.

Question

I'm creating a Lambda function that receives parameters in a POST request, including an object (CSV file) that I need to access and execute a series of queries based on its content to a private RDS.

I can access the S3 bucket if the Lambda function is not associated with a VPC, but in this case, I cannot access the private RDS. Also I have reviewed the security groups, route tables, and there is an internet gateway. I have also checked the IAM policies, which allow listing and reading from any bucket.

Accepted Answer

This is very common scenario as same applicable for all compute. 
As a best practice you should create Lambda within VPC so you can access RDS. 
To access S3 from Lambda function inside a VPC, use VPC endpoints

Answer

You must connect the Lambda to a VPC that can communicate with the database or look at other options, such as RDS Proxy or the RDS Data API. I haven't used RDS Proxy or RDS's Data API recently, and I can't remember if they enable communication with the DB without being in the private VPC, but that is where I would look first.

Connect a Lambda function to an S3 bucket while being connected to a VPC to make queries to a private RDS.

相關內容