我的C＃应用​​程序应如何安全地连接到我的AWS EC2数据库？

Question

As I see it, I have two options: access my database with a ReSTful (http) webservice connection, or directly connecting to MySQL. I've found that it isn't that easy to directly access MySQL ( http://www.cyberciti.biz/tips/how-do-i-enable-remote-access-to-mysql-database-server.html ) and that the remote connection is IP-specific (my app would run in many places and the IPs won't be static).

How should applications connect to databases? Directly or through the httpd server?

Thank you very much :)

Answer 1

You can allow a MySQL user account to connect from any host (IP addresses).

for example, GRANT ALL ON foo.* TO bar@'%' IDENTIFIED BY 'PASSWORD';

Answer 2

Depends on how secure you need it to be. We configure an OpenVPN server on the same VPC as the MySQL server and use that to control access to our systems. There is no direct connect to MySQL.