I have a RDS database on a VPC which is public with a password.

I have some lambda functions (that are not in a VPC) that communicates with this database. To be able to do that I had to modify the security group of my database that allows all trafic for any IP adresses.

For me it's the easiest solution, I don't have to pay for anything (NAT Gateway...), my Lambda function have access to internet and finally I can have access to my database locally.

What I did is the easiest for me but I can of understand that to have a public database is risky. But I don't really understand why ? How can someone have the public address of my database if I just keep it for myself ? Should I filter with the IP address or it is not enough ?

  • 1
    Welcome to the community. Your DB should not be exposed to the internet Jan 7 at 13:53


You must log in to answer this question.

Browse other questions tagged .