Securely Accessing Private RDS Databases Using SSH Tunneling and a Bastion Host

I’ve been using AWS services like EC2 and RDS under the free tier and recently started incurring charges due to the use of public IP addresses. AWS provides one free public IP, but my RDS instance had another public IP attached — and that’s where the billing began. AWS billing showing charges for additional public IPv4 addresses. A better, more secure, and cost-effective solution is to keep your RDS private within a VPC and connect to it via a method called SSH tunneling through a bastion host. ...

October 5, 2025 · 3 min · 543 words