عرض عملي: قاعدة بيانات خاصة لا يصل إليها إلا التطبيق

خطوة بخطوة

1. Create a VPC with public and private subnets across two AZs.
2. Launch a managed PostgreSQL instance in the private subnets with public access disabled.
3. Planned mistake: allow 0.0.0.0/0 on the database security group to "test quickly". Fix: allow only the application's security group on port 5432.
4. Create a least-privilege role for orders and connect from the app; show that a connection from the internet times out.
5. Write the monthly cost estimate from the calculator and tag all resources; remember to tear down.

اختبر فهمك