- outline
With SSH tunneling using bastion host, you can access private resources such as RDS.
- tunneling
##
ssh -i <bastion-host-pem-key> -f -N -L <localhost-port-you-choose>:<rds-end-point>:<rds-port> <bastion-host-user>@<bastion-host-public-ip>
##
ssh -i ~/.ssh/pem.pem -N -L 3306:rds.amazonaws.com:3306 -L 27017:docdb.amazonaws.com:27017 <bastion-host-user>@<bastion-host-public-ip> -v
- access
mysql -h 127.0.0.1 -P <localhost-port-you-choose> -u <rds-user> -p <rds-password>
- reference
https://aws.amazon.com/premiumsupport/knowledge-center/rds-connect-using-bastion-host-linux/