AWS RDS keep user access with dynamic IP

Question

On AWS rds I added few postgres users. There is Security groups which needs IP addresses for access to DB instance right?

So if user have static IP address, then I will add that once and there is no problem.

But if user have dynamic address, only way I see is that periodically update IP's for keep users valid connections.

My question is: if there is possible to keep dynamic IP users valid connections, without manually update security group data ?

Thanks !

Answer 1

Following are some of the options;

1. Connect Ec2 using bastion host.

2. In case, user's are connecting using office network/VPN with fixed private IP CIDR, then allow inbound for that IP CIDR in the security group. Note:* This might open access to wider private network of your organization. RDS will be available from on-premise, only if you have that AWS VPC connectivity from your organization private network.