This message was deleted.

You likely got it with your last note - the node you’re running Pulumi on will need to be able to access the Postgres API, so if the Aurora RDS rejects that access, Pulumi won’t be able to connect.

Aaah, I suspected that might be the culprit, dang. And there's probably not an easy way around it I suppose? 😄

There’s a similar discussion here: https://pulumi-community.slack.com/archives/CRH5ENVDX/p1626445179027100

Technically it does through an SSH tunnel—changed the

endpoint

parameter of the

postgresql.Provider

to

localhost

and now it works. The problem is that when the entire stack is provisioned at once (and setting up the bastion host through which the connection goes is part of it), establishing the SSH tunnel would have to be part of the program. Still, this is progress, so thank you a lot! 😄

Yep, you’d want to set up the bastion host to be able to do that 🙂

@thousands-area-40147 or your CI/CD runner to have that access

We're only starting to adopt IaC, so I'll make sure to relay your input to the team! Thanks! 😄

hmm it depends on your experience but it wouldn't be a bad idea to hire a consultant for few hours just to give you some evaluation and tips how to move forward

Got someone already, I just want to be able to ask informed questions 😁