2

Is it generally possible to query a database housed in PaaS "A" from a request originating in a different PaaS "B" (or does it depend on the PaaS)? Asked in another way: Can an app that is hosted in PaaS "B" make a query to a database housed in PaaS "A"?

For example, could DynamoDB residing in AWS be queried from an app that is separately hosted on Azure?

If the answer is that it depends on which PaaS is "A" and which PaaS is "B", that would still be helpful to have clarified.

cellepo
  • 125
  • 8
  • 1
    Yes. AWS DynamoDB has public API endpoints. AWS RDS databases can be made public with a checkbox and allowing access in your security group. This I think is called "multi cloud" and is a perfectly valid configuration. Just beware of latency and bandwidth issues. – Tim Oct 05 '18 at 03:11
  • Indeed it is called "Multicloud", I see: https://en.wikipedia.org/wiki/Multicloud – cellepo Oct 05 '18 at 03:21

1 Answers1

4

The answer is: it depends but generally yes :)

In your example of DynamoDB being used from Azure - yes it is possible.

You will need to create an AWS IAM User with the privileges to use your DynamoDB and use its Access and Secret keys in the Azure-hosted application. That will work seamlessly. Provided your Azure app has internet access, because DynamoDB is accessed over public IP addresses (unless you set up AWS VPC Endpoints, but that's a topic for another discussion).

Likewise Azure Cosmos DB and Google BigTable can be used from all other clouds as well as from e.g. on-prem applications, as long as you provide the right access credentials.

Then there may be services like AWS RDS / Aurora (which is in fact MySQL, PgSQL or similar database engine managed as a service by AWS) which may need some more effort to use from outside. But it's still possible - either you can run it with public IP addresses but then be very careful about setting the right firewall (e.g. AWS Security Group). Or run them on private IP addresses but then you'll need to enable connectivity from your other clouds over some sort of VPN.

Hope that helps :)

MLu
  • 24,849
  • 5
  • 59
  • 86
  • Yes that helps, thanks - this opens all sorts of new possibilities/configurations/architectures (especially on free tiers ;) – cellepo Oct 05 '18 at 02:09