So I am relatively new to the networking aspects of AWS and am having a problem. Here is a short description of what I have.
I have a RDS that is not publicly accessible. The endpoint resolves to a private 10.X.X.X IP. I have an EC2 instance that is in the same VPC/subnet and is publicly accessible. I can SSH to this EC2 instance with no problems. Oddly, I have a process running on that EC2 instance that is able to successfully connect to RDS via JDBC.
However, since the RDS instance is not publicly accessible I want to use the EC2 instance to access the RDS instance from my dev PC. Everytime I do, I get "channel 2: open failed: administratively prohibited: open failed" on my PC.
Here is my command
ssh -i ~/key.pem -N -L 3307:rds-name-here.abcdefghi123.us-east-1.rds.amazonaws.com:3306 email@example.com
Obviously I changed the details but thats the jist of the command. This is the only error I am getting and really don't know where else to look.
Any pointers in the right direction would he helpful. I am at a loss at the moment. I did confirm the security groups allow all traffic to and from each other. I did not modify the Network ACLs at all.
EDIT: I enabled some debug flags ( -vvv ) and it is responding with packet type 92?
debug2: fd 6 setting TCP_NODELAY debug2: fd 6 setting O_NONBLOCK debug3: fd 6 is O_NONBLOCK debug1: channel 2: new [direct-tcpip] debug3: send packet: type 90 debug3: receive packet: type 92 channel 2: open failed: administratively prohibited: open failed debug2: channel 2: zombie debug2: channel 2: garbage collecting