Connecting through AWS PrivateLink

Polytomic can also connect to your AWS RDS PostgreSQL database through AWS PrivateLink. This page describes the steps to enable this using AWS Resource Access Manager (RAM).

Define sharing rules in AWS RAM

AWS Resource Access Manager provides abstractions for defining resources and bundling them together to manage access. Before configuring the resource itself, navigate to AWS Resource Access Manager and click Create a resource share:

This will start a multi-step configuration process.

Enter a name for your resource then click Next:

In Step 3 below, you’ll define who can utilize the Share. Select AWS Account under Select principal type and enter Polytomic’s AWS account ID (contact your Polytomic customer success manager or email [email protected] to obtain the AWS account ID). Then click Add:

Review your selections and click Create resource share to complete the process.

Defining the resource in your VPC

Navigate to VPC in the AWS console in order to define the resource that will use the Share you just created.

If you do not already have a Resource Gateway, click Resource gateways and then Create resource gateway. The new resource gateway should be in the same VPC as your PostgreSQL RDS server and in a security group that can access RDS:

Once the resource gateway has been created, click on Resource configurations in the VPC navigation bar and then click on Create resource configuration. The configuration defines what you’re sharing (your PostgreSQL RDS database) and who can access it:

After naming the configuration, you’ll select Resource as the configuration type, ARN as the type, and the resource gateway you previously created.

Under ARN resource definition, choose the RDS database you wish to share via PrivateLink.

Select the Share configuration you previously created under Resource share.

Finally, click Create resource configuration.

This completes the step needed within your VP to provide access to your PostgreSQL RDS database via AWS PrivateLink.

Once all the above steps have been completed, contact us and we will complete the remainder of the AWS PrivateLink step required on the Polytomic side to enable connecting to your database.