AWS Lambda access to RDS outside VPC

amazon-web-services aws-lambda amazon-rds amazon-vpc
ftkg picture ftkg · Nov 23, 2016 · Viewed 8.4k times · Source

The RDS instance is not on VPC (Classic); it is associated to a security group with allowances to some CIDR/IPs and EC2 security groups.

I want to create a AWS Lambda function that will execute some SQL statements on this database, and also make requests to a EC2 instance that is in the same security group. Is it possible to allow Lambda to access this database?

Answer

Digitalkapitaen picture Digitalkapitaen · Nov 25, 2016

You have two options:

1) Lambda function outside VPC: Set the RDS to "Publicly Accessible" and in the security group allow access from everywhere (because the set of Lambda IPs is not known).

2) Lambda function inside VPC: Allow access to RDS from all IPs in the VPC because the Lambda function will get an IP from the available ones in your VPC. Beware: If the Lambda function is run multiple times in parallel, your VPC may run out of IPs, making your Lambda function fail.

Related questions

can AWS Lambda connect to RDS mySQL database and update the database?

I am trying to connect AWS Lambda function to RDS mysql database. I just wanted to update the database from my lambda function. Is it possible to access RDS by specifiying IAM Role and access Policy?. I can connect to …

Read More
AWS Lambda can't connect to RDS instance, but I can locally?

I am trying to connect to my RDS instance from a lambda. I wrote the lambda locally and tested locally, and everything worked peachy. I deploy to lambda, and suddenly it doesn't work. Below is the code I'm running, and …

Read More
How to pass a querystring or route parameter to AWS Lambda from Amazon API Gateway

for instance if we want to use GET /user?name=bob or GET /user/bob How would you pass both of these examples as a parameter to the Lambda function? I saw something about setting a "mapped from" in the …

Read More