Eli
Eli

Reputation: 38899

Connect to RDS instance from VPC outside region

I'm trying to add the ability to connect to my RDS instance from servers I brought up in a new region (still in an EC2 VPC). I know I can do this by bringing up a bastion server, or creating two extra boxes and running a VPN through them, but I'm wondering: is there a simpler way of doing this? Is there no way to just allow boxes in a security group in one region access to an RDS in another?

Upvotes: 0

Views: 1495

Answers (1)

datasage
datasage

Reputation: 19563

You can open the security group to an IP in another region, but you cannot open it to a security group in another region.

VPN is probably the safest way to do this, but you would want to closely monitor your VPN instances in case they fail.

If you don't need write access, you can create a multi region read replica. For performance this may be a good idea to use in addition to writing to the master.

Upvotes: 3

Related Questions