Common Workflows¶
Connect to a Private Database¶
- Select the AWS profile for your environment. For an SSO profile, sign in with the AWS CLI or StormTunnel's in-app SSO.
- Start the tunnel that forwards through an SSM-managed EC2 instance to the private RDS endpoint. Use the selected tunnel's switch or Tunnel → Toggle Selected Tunnel (Cmd+Enter).
- In your database client, use host
127.0.0.1and the tunnel's Local Port. Sign in to the database with its own username and password. - Stop the tunnel when you finish.
See Connect to a private AWS RDS database for requirements and a PostgreSQL example, or Get started with a private RDS tunnel for the first-time setup.
Use Several Services¶
Create one tunnel per service. Give each active tunnel its own local port. A clear name such as staging-postgres or production-redis makes tunnels easier to find.
Switch Environments¶
If two tunnels use the same local port, disconnect one before connecting the other. Alternatively, assign a different local port to each environment and use the matching port in your client configuration.
Use an Existing SSH Configuration¶
For an environment that still requires SSH, import or use a host alias from ~/.ssh/config. See Creating tunnels.