15. Amazon RDS for MySQL: Create, Connect, Back Up and Keep It Private
15.1 What RDS Is and Why Companies Use It
RDS (Relational Database Service) is a managed database: you choose the engine (MySQL, MariaDB, PostgreSQL and others), size and storage, and AWS runs the server for you. You still connect with the normal mysql client and write the same SQL you learnt in Part 5.
| Task | MySQL on your own EC2 | Amazon RDS MySQL |
|---|---|---|
| Install and OS patching | You | AWS |
| MySQL minor upgrades | You | AWS (maintenance window you choose) |
| Backups | You write mysqldump + cron |
Automated daily backups + transaction logs |
| High availability | You build replication | Tick Multi-AZ |
| SSH to the database server | Yes | No – only the MySQL port |
| Root/SUPER privilege | Yes | No – you get a "master user" with most privileges |
| Schema, users, queries, security groups | You | Still you |
Internet
│ 443/80
┌─────▼──────┐ 3306 (only from app SG) ┌──────────────────┐
│ EC2 web/app│ ───────────────────────────►│ RDS MySQL │
│ public sub.│ │ private subnets │
└────────────┘ │ Public access:NO│
└──────────────────┘
Why this matters for security
"Managed" does not mean "secure by default for your data". AWS secures the infrastructure; you secure who can connect, which users exist, what they can do and whether the app is vulnerable to SQL injection. This split is called the shared responsibility model (सामायिक जबाबदारी मॉडेल) and interviewers love asking about it.
Ravindra Bagale's Tip
Khup students la vatate RDS ghetla mhanje SQL injection chi kalji nahi – AWS baghel! Nahi mitrano. RDS server patch karto, tumcha PHP code nahi. Prepared statements, least-privilege user aani private network – he tumchich jababdari aahe.
Practice task
From the table above, list four jobs that move to AWS with RDS and four jobs that stay with you. Explain the shared responsibility model in two sentences.