Demo: a private database reachable only from the app
On This Lesson 3 topics
This lesson is planned. The outline below lists the topics it will cover. The full lesson has not been published yet.
In this lesson
build the network and prove the database is private. Prepares MID-056-LAB1.
Draft outline details
Step by step
- Create a VPC with public and private subnets across two AZs.
- Launch a managed PostgreSQL instance in the private subnets with public access disabled.
- Planned mistake: allow
0.0.0.0/0on the database security group to "test quickly". Fix: allow only the application's security group on port 5432. - Create a least-privilege role for
ordersand connect from the app; show that a connection from the internet times out. - Write the monthly cost estimate from the calculator and tag all resources; remember to tear down.
Check your understanding
What proves the database is private?
Show answer
It has no public endpoint and accepts connections only from the app's security group.
Practice
Apply this lesson with the module's lab, exercises and quiz.
Marking a lesson complete is optional and you can undo it any time. Your progress stays in this browser.