# How to Secure AWS RDS Access with an Identity-Aware Access Proxy

DevFeed: [How to Secure AWS RDS Access with an Identity-Aware Access Proxy](<https://devfeed.tech/articles/how-to-secure-aws-rds-access-with-an-identity-aware-access-proxy-29689.md>)

Original publisher: [Read original article](<https://goteleport.com/blog/how-to-secure-amazon-rds-access-with-identity-aware-access-proxy/>)

Author: info@goteleport.com (Janakiram MSV)

Published: 2022-05-05T00:00:00Z

Content type: tutorial

Language: en

Sources: [Teleport](<https://devfeed.tech/sources/teleport.md>)

Topics: [Amazon RDS](<https://devfeed.tech/topics/amazon-rds.md>), [Amazon Web Services](<https://devfeed.tech/topics/aws.md>), [VPC](<https://devfeed.tech/topics/vpc.md>), [Databases](<https://devfeed.tech/topics/databases.md>), [Amazon EC2](<https://devfeed.tech/topics/amazon-ec2.md>), [Authorization](<https://devfeed.tech/topics/authorization.md>), [Command-line interface](<https://devfeed.tech/topics/cli.md>), [configuration](<https://devfeed.tech/topics/configuration.md>), [MFA](<https://devfeed.tech/topics/mfa.md>), [audit](<https://devfeed.tech/topics/audit.md>), [certificates](<https://devfeed.tech/topics/certificates.md>)

Tags: [access-control](<https://devfeed.tech/tags/access-control.md>), [amazon-rds](<https://devfeed.tech/tags/amazon-rds.md>), [audit](<https://devfeed.tech/tags/audit.md>), [authentication](<https://devfeed.tech/tags/authentication.md>), [authorization](<https://devfeed.tech/tags/authorization.md>), [aws](<https://devfeed.tech/tags/aws.md>), [certificates](<https://devfeed.tech/tags/certificates.md>), [cli](<https://devfeed.tech/tags/cli.md>), [configuration](<https://devfeed.tech/tags/configuration.md>), [database](<https://devfeed.tech/tags/database.md>), [databases](<https://devfeed.tech/tags/databases.md>), [ec2](<https://devfeed.tech/tags/ec2.md>), [how-to](<https://devfeed.tech/tags/how-to.md>), [services](<https://devfeed.tech/tags/services.md>), [vpc](<https://devfeed.tech/tags/vpc.md>)

## AI overview

This tutorial explains how to configure Teleport as an identity-aware access proxy for Amazon RDS databases. It covers placing RDS in a private Amazon VPC subnet and configuring the Teleport proxy/auth server, database agent host, and RDS instance. The approach uses identity-based SSO, short-lived certificates, multi-factor authentication, role-based access control, access requests, and auditing.

## Source excerpt

This post explains how to configure Teleport identity-aware access proxy for Amazon RDS access.