How can I ensure my Redis and RDS is accessible only for dynamic instances (AWS Autoscaling)

Question

I have hosted my magento2 site in AWS auto-scaling and using Redis/Elasticache, RDS. How I can ensure my Redis and RDS are accessible only from dynamic instances creating in auto-scaling.

Answer 1

You can put Redis/Elasticache, RDS inside a security group and configure its Security Group Inbound rule to only allow the traffic from Security Group of Instances from AWS AutoScaling.

Something like below shown in the picture. Configuring Security Group's inbound rule to allow traffic from different Security Group which will restrict all the other traffic to enter except from the configured Security Group.

More details can be found below :

Security Group for ElastiCache

RDS Security Group