Security group to be set for a virtual database server
Set the following rules for the security group to be set for a virtual database server.
Purpose of the rule | Direction | Protocol | Party allowed to connect (*1) | Port |
---|---|---|---|---|
Communication from the DB client | ingress | tcp | DB client | Port number set when the virtual database server was created (26500 is used by default) |
Internal communications within the virtual database server | ingress | tcp | Security group to be set for the virtual database server (security group to set this rule) | Port number set when the virtual database server was created (26500 is used by default) |
Internal communications within the virtual database server | egress | tcp | Security group to be set for the virtual database server (security group to set this rule) | Port number set when the virtual database server was created (26500 is used by default) |
*1: The following two formats can be used to specify the party allowed to connect in the security group.
- --remote-ip-prefix
CIDR of the party allowed to connect
- --remote-group-id
Security group of the party allowed to connect