the public ONLY for a user with read-only access? I'm at a loss about what to even look for here. The AWS documentation points me towards read replications, but I'd rather avoid running 2 RDS instances. I thought about exposing the entire instance to the public too, and only allowing a MySQL user with read-only privileges from external IPs
No. Don't expose it to the public internet.
Обсуждают сегодня