Virtual Private Cloud Quiz
You are planning on hosting a web and MySQL database application in an AWS VPC. The database should only be accessible by the web server. Which of the following would you change to fulfill this requirement?
A. Network Access Control Lists
B. AWS RDS Parameter Groups
C. Route Tables
D. Securityg roups
D. Securityg roups
Security group associated with the db instance should allow port 3306 traffic from EC2 instance. The AWS Documentation additionally mentions the following:
A security group acts as a virtual firewall for your instance to control inbound and outbound traffic. When you launch an instance in a VPC, you can assign up to five security groups to the instance. Security groups act at the instance level, not the subnet level. Therefore, each instance in a subnet in your VPC could be assigned to a different set of security groups. If you don’t specify a particular group at launch time, the instance is automatically assigned to the default security group for the VPC.
For more information on VPC Security Groups, please visit the link below.
https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_SecurityGroups.html
