Add security group for RDS and allow ingress from bastion

shogo82148 · Mar 11, 2024 · 8f08c67 · 8f08c67
1 parent 49b990c
commit 8f08c67
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/_integration/lib/integration-stack.ts b/_integration/lib/integration-stack.ts
@@ -27,12 +27,17 @@ export class IntegrationStack extends cdk.Stack {
     });
 
     // Relational Database Service
+    const rdsSG = new ec2.SecurityGroup(this, "RDSSG", {
+      vpc,
+    });
+    rdsSG.addIngressRule(bastionSG, ec2.Port.tcp(3306));
     const cluster = new rds.DatabaseCluster(this, "Database", {
       engine: rds.DatabaseClusterEngine.auroraMysql({
         version: rds.AuroraMysqlEngineVersion.VER_3_05_2,
       }),
       writer: rds.ClusterInstance.serverlessV2("writer"),
       vpc,
+      securityGroups: [rdsSG],
     });
   }
 }