search

CDLUC3 / dmsp_aws_prototype

Sceptre CloudFormation templates for DMPHub v2
MIT License
1 stars 0 forks source link

Add Cidr based ingress/egress rules for Dynamo #15

Closed briri closed 11 months ago

briri commented 2 years ago

Add ingress/egress rules for the DynamoDB for the UCOP CidrBlock so that as a developer, I can access the database and run queries through an editor.

See https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-rules-reference.html#sg-rules-db-server

Not sure if this would require a NAT to be added to the private subnets.

briri commented 1 year ago

Also need to do this for RDS

ashleygould commented 1 year ago

follow up with Brian

briri commented 1 year ago

Yes, this will still be useful, especially in the stg/prd environment at least early on.

The ultimate goal would be for us to NOT need this in any environment. It would be best for me to manipulate Dynamo records via the DMPTool UI.

I'm not sure what's involved to set this up though and the degree of difficulty. I am able to edit records via the CLI for the time being (and directly through the console in dev) and I've only had to do so a few times so far.

briri commented 11 months ago

I got this working using AWS' NoSQL Workbench. I am able to connect to the both the dev and stg/prd accounts.

Will use this approach or the CLI if I need to manipulate records in the stg/prd env.