VPC endpoint and Systems Manager configuration
Yoimer Román
EC2 instances and RDS in public subnets had to be moved and configured to private subnets in their current VPC.
.pem files for ssh EC2 would no be longer usable and RDS public access (URL endpoints) would be revoked too.
VPC endpoint configuration on the private subnets, and systems manager agents running on the EC2 were the new access point.
IAM and EC2 profile roles permissions would let the private access.
RDS access is via the EC2 instances acting as bastion via security group
Like this project
Posted Jan 15, 2025
Reinforce EC2 and RDS security by removing public subnet acces. New access via VPC endpoint and systems manager agents on private subnets
Likes
0
Views
2
