AWS Basics: Connect Database in AWS Private Subnet from DBeaver client using SSH Tunnel

This video demonstrates how to connect to a database instance which is in private subnet from DBeaver or any sql client from local machine using SSH Tunnel.
Command :
ssh -N -i "KeyPair File Name" -L "LocalPortNumber":"Remote Host Name":"Remote Port Name" "BastionHostLoginUser@"BastionHostPublicIP"

[@62danielmm]

nobody explain how to connect, you are a master, thank you friend. Congratulations. You know enough to learn tuhis topics.

[@lapsanches]

Congrats on the great video. It is clear and straightforward.

[@rajiv1607]

Another nice video Dan, keep it up

[@gregoryzhang743]

This is very clear, thanks!

[@PiyushBajaj]

Thanks! it works!

[@hamzasabri5610]

Thank you this is very nice, can we connect it without the key pair?

[@abdelkerimlemaadi1855]

Thank's for this video but i got this error [Warning: Identity file key_name.pem not accessible: No such file or directory Permission denied (publickey,gssapi-keyex,gssapi-with-mic).] when i add the commend 'ssh -N -i....' How can i fix it ?

[@nanolytics470]

could you specify the ssh details via dbeaver config SSH tab?

[@renatospaka]

Awesome. However, there is a question: does the tunnel run over an SSL e2e connection? If there is a sniffer around, can s/he hack the tunnel?

[@phaninv6224]

Is it possible to record ssh tunnel sessions who are using it ?

[@megadani1566]

Hello, if i get errors when i add commend 'ssh -N -i....'??? I got an permission error like 'publickey,gssapi-keyex....). My pem key is in my local machine.

[@kazakman7772]

ok but lest say u got 1 priv ec2 in priv subnet and rds in priv subnet as well. HOW DO U CONNECT TO PRIVA EC 2 AND THEN TO RDS???

[@panagiotisveranoudis3025]

you can't, the whole concept of bastion, is to exist in the public subnet, so internet facing. You can still improve the security by only allowing to connect to your bastion instance only from your IP (create a security group, MyIP as resource, and attach that to your bastion), so then only you can access the bastion and then your rds.hope that helps.