CODEWITHSUNDEEP
amazon-web-servicesaws-lambdaamazon-rdsamazon-vpc
Jumpa
Jumpa

Reputation: 4409

Access RDS from VPC Lambda

Is it possible to access a publicly available RDS instance from a Lambda expression in the same VPC, without using a NAT? Could you please point me in the right direction to confugure this? Thanks.

RDS and Lambda have the same VPC, the same Subnets, the same Security group. The security group has 2 inbound rules:

  1. All Type - All Protocol - All Port Range - Source ALB security group
  2. All Type - All Protocol - All Port Range - Source security group itself

Is that correct?

Upvotes: 4

Views: 1159

Answers (2)

John Rotenstein
John Rotenstein

Reputation: 269101

The recommended configuration is:

  • Create a Security Group for the AWS Lambda function (Lambda-SG). It does not require any inbound rules.
  • Create a Security Group for the Amazon RDS db instance (DB-SG). It should allow an Inbound connection on the appropriate port (3306?) from Lambda-SG.

That is, DB-SG should specifically reference Lambda-SG as the source of the inbound connection.

Upvotes: 4

Jumpa
Jumpa

Reputation: 4409

Turns out that the Lambda was timing out RDS connection, due to callback deadlock like explained here: https://stackoverflow.com/a/42619071/2373113 Other thing to notice is that traffic inside the same security group must be explicitly enabled in rules.

Upvotes: 0

Related Questions