Search code examples
amazon-web-servicesamazon-vpcaws-security-group

Security group through another security group


I have two AWS Accounts, one database in the main account and one shared VPC betweeen accounts (AWS RAM).

The DocumentDB (database) is configured to use a security group that lives in the main account.

In the secondary account I have access to the VPC but no access to the security groups of the VPC, so I've created a new Security group in this secondary account.

What I want to do is connect to the database of the Main Account from the Secondary Account.

Thannks,


Solution

  • VPC sharing participants can reference each other’s security groups via account-number/security-group-id