mysql-AWS：无法将Amazon QuickSight连接到RDS

我们在West-1(加利福尼亚北部)有一些MySQL RDS实例,并希望使用QuickSight创建一些报告.第一个问题是QuickSight仅在West-2(俄勒冈州)可用,而没有显示我们的RDS,因此我在West-2中创建了一个只读副本数据库.

我仍然无法连接到我的实例,它显示以下错误：
连接失败.确保可以从适当的Amazon QuickSight IP地址范围访问您的实例.

我已经创建了一个允许入站规则中使用IP 54.70.204.128/27的安全组,并将其应用于我的实例.最终允许我连接到实例的是将实例的“公开可用”字段设置为“是”.

但是,我的老板希望它保持为“否”,并且我们还能够使用MySQL SSH连接方法通过DOMO连接到非公共实例.

无需将“公共访问”设置为“是”,是否可以使QuickSight与RDS之间的连接正常工作？

解决方法:

我为此向AWS创建了一个支持请求,下面是他们的答案.我会试一试.

您好Alistair,

感谢您联系AWS Premium支持.今天很高兴为您提供帮助.

我了解您想从QuickSight连接到Prod RDS数据库,但是却收到错误消息：“未验证”.您还想知道是否存在一种变通办法,即无法公开访问您的RDS实例.

Amazon Web Services提供了一项名为CloudFormation的服务,该服务有助于自动化某些流程.
此服务将允许您的RDS实例通过自定义NAT实例连接到QuickSight.因此,您不必将数据库放在公共子网中.
附带的是CloudFormation模板(NAT_RDS_Provisioning.template),在启动CloudFormation堆栈[1]后,将创建一个实例和一个安全组,然后输入所需的变量.
然后,这将提供从您定义的源端口上的源地址到EC2实例端点的访问,这将允许QuickSight访问RDS实例服务器而无需公开RDS实例.

要启动此CloudFormation堆栈,请参见以下步骤…请记住,您在其中创建该区域的区域必须与数据库所在的区域相同.

1. From your AWS console navigate to " CloudFormation " 
2. Click " create stack ", you will then be asked to Select Template, you will then select " Design template".
3. Next to Parameters - click " Mappings ", at the bottom of that page you will see: Components and Template. 
4. Select " Template " and copy and paste the provided script in there. (see attached: NAT_RDS_Provisioning.template)(Please use case link below signature)
5. In the top right hand corner you will see a refresh button, click to refresh. 
6. On the top left there is a square with a tick inside (clicking this validates the template). 
7. Once validated - click the little cloud with the arrow in it , this will create the stack.
8. You will be taken back to the select template page, click "next" in the bottom right corner.
9. Under Specify Details, name your stack and then complete all Parameters, info on parameters provided below: 
    9.1 Stack name  (Example: NAT-RDS-QuickSight)
    9.2 DestinationAddress - Add your RDS instance Endpoint here. (That way when a fail-over occurs the endpoint should be updated in 60 seconds maximum).
    9.3 DestinationPort - The service remote destination port: 
    9.4 InstanceType - The EC2 instance class. (The size of the NAT instance will depend on the amount of data you want to pull into QuickSight) 
    9.5 KeyName - Name of an existing EC2 KeyPair to enable SSH access to the instance: 
    9.6 SourceAddress - The source range you want to allow access from: example 0.0.0.0/0.
    9.7 SourcePort - The port the service must listen on: 
    9.8 Subnet - a Public Subnet that is in the same VPC as your RDS instance:
10. Click " Next "
11. On the Options page - complete the desired fields and click " Next " (Optional)
12. Review all information - (Confirm the details for your NAT EC2 instance)
13. Under template you will see "Estimate cost - click on cost to give you an idea of the monthly estimate to have this service running) 
14. Then  select " Create " in the bottom right hand corner.
15. On the main CloudFormation Page, click "refresh" You will the notice the status of your Stack being created.
16. If you navigate to your EC2 console you will notice your NAT instance running / creating.

请确保NAT实例可以访问您的RDS实例,其中包括安全组设置.
这应该通过在RDS实例数据库的安全组中包括NAT实例的IP地址来完成.

然后,您应该能够按照设置访问EC2 IP地址和端口,这会将流量转发到您的数据库.

创建以上内容时,您会看到涉及的估计成本,但是我在下面添加了两个链接,以获取有关此方面的更多信息以及成本计算器.

成本将与EC2实例相同,这将启动AWS Linux最新标准AMI,而吞吐量将由实例类[2]& [3]：

[1] https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/GettingStarted.Walkthrough.html
[2] https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSVolumeTypes.html
[3] https://calculator.s3.amazonaws.com/index.html

希望以上信息和解决方案对您有所帮助.

如果您遇到以上任何困难或不确定,请随时与我联系,我们将非常乐意为您提供帮助.

要查看此通信中包含的名为“ NAT-RDS-Provisioning-Template.template”的文件,请使用签名下方给出的大小写链接.

最好的祝福,

德琳·T.
亚马逊网络服务

请参阅此处提供的模板文件内容：https://pastebin.com/m67sz4bR

标签：amazon-web-services,amazon-rds,database-connection,amazon-quicksight,mysql
来源： https://codeday.me/bug/20191111/2019115.html