CODEWITHSUNDEEP
amazon-web-servicesapisecurity
user100123122
user100123122

Reputation: 339

Use AWS API and RDS to securely access data

I want an API which can query a MySQL database and return the desired data. Currently for development, I am using a AWS lambda. I am passing an access token in the request, so I am able to verify that a valid user is making the request. However, when I fetch data from the database, I am logging on to the database using a username and password and the database is open for public access. I think this application has security vulnerabilities because if anyone knows the database endpoint, they can brute force the username and password.

Is there a more secure approach in accomplishing this. The general workflow is:
API Gateway -> Lambda -> RDS (MySQL) -> Client
And the vulnerability I would like to avoid is the open access of the RDS MySQL DB.

Upvotes: 0

Views: 241

Answers (1)

Mark B
Mark B

Reputation: 200562

You should configure the Lambda function to run inside the VPC with the RDS instance, and then disable public access to the RDS instance.

Upvotes: 1

Related Questions