如何使用CDK连接ECS内网IP到RDS安全组?
我需要一个ApplicationLoadBalancedFargateService (CDK Code)的内网ip。
我尝试了以下操作(解决失败):
const auroraSecurityGroup = new ec2.SecurityGroup(this, 'security-group', {
vpc,
allowAllOutbound: true,
description: 'Security Group of Aurora PostgreSQL',
securityGroupName: AURORA_SECURITY_GROUP_NAME
});
auroraSecurityGroup.addIngressRule(ec2.Peer.ipv4('my ecs private ip'), ec2.Port.tcp(DB_PORT), 'describe');发布于 2020-01-13 12:54:39
如果要允许特定ip地址,则必须指定with cidr。
ec2.Peer.ipv4('1.2.3.4/32')允许fargate服务的安全组作为arurora seucirty组的源:
auroraSecurityGroup.connections.allowFrom(ecsService.service, Port.tcp(3306), 'Inbound');https://stackoverflow.com/questions/59710635
复制相似问题