Security measures for use with AWS Lambda?
Hi,
Can anyone provide any guidance on security with regards to using Neon with AWS Lambda? I feel a little uneasy with having our database reachable via the public Internet. Thanks!
6 Replies
deep-jade•16mo ago
hey Sam - If you're on the Scale plan you can configure your Lambda to use an Elastic IP Address on AWS, and then set that explicitly in the IP Allow rules on Neon.
AWS: https://docs.aws.amazon.com/prescriptive-guidance/latest/patterns/generate-a-static-outbound-ip-address-using-a-lambda-function-amazon-vpc-and-a-serverless-architecture.html
Neon IP Allow: https://neon.tech/docs/introduction/ip-allow
Neon
IP Allow and protected branches - Neon Docs
Neon's IP Allow feature, available with the Neon Scale plan, ensures that only trusted IP addresses can connect to the project where your database resides, preventing unauthorized access and helping m...
sensitive-blueOP•15mo ago
I'm on the Launch plan for now. thanks for the info!
evident-indigo•14mo ago
@andyhats the ip allow rules is not available for scale plan now?
sensitive-blueOP•14mo ago
@Ying it's on the $700/mo plan now for some reason. @andyhats what drove this decision? most other DB services have IP allow listing on more affordable plan levels
fair-rose•14mo ago
Hey Sam - appreciate the question, we're still figuring out the right home for features like these, so your feedback is welcome and reasonable. The Business Plan is still pretty new.
evident-indigo•14mo ago
thanks for the follow up, yeah I agree it's so expensive for such a basic security feature, I'd definitely not put my db on public internet no matter how complex the password is and yet we are not big enough for $700/mo on db.