RDS for Oracle: Extending Outbound Network Access to use SSL/TLS
AWS Architecture BlogRDS for Oracle: Extending Outbound Network Access to use SSL/TLSby Surya Nallu | on20 APR 2018| inAmazon RDS,Architecture,RDS for Oracle|Permalink|ShareIn December 2016, welaunchedthe Outbound Network Access functionality for Amazon RDS for Oracle, enabling customers to use their RDS for Oracle database instances to communicate with external web endpoints using the utl_http and utl tcp packages, and sending emails through utl_smtp. Weextendedthe functionality by adding the option of using custom DNS servers, allowing such outbound network accesses to make use of any DNS server a customer chooses to use. These releases enabled HTTP, TCP and SMTP communication originating out of RDS for Oracle instances – limited to non-secure (non-SSL) mediums.To overcome the limitation over SSL connections, we recently published awhitepaper, that guides through the process of creating customized Oracle wallet bundles on your RDS for Oracle instances. By making use of such wallets, you can now extend the Outbound Network Access capability to have external communications happen over secure (SSL/TLS) connections. This opens up new use cases for your RDS for Oracle instances.With the right set of certificates imported into your RDS for Oracle instances (through Oracle wallets), your database instances can now:Communicate with a HTTPS endpoint: Using utl_http, access a resource such as https://status.aws.amazon.com/robots.txtDownload files from Amazon S3 securely: Using a presigned URL from Amazon S3, you can now download any file over SSLExtending Oracle Database links to use SSL: Database links between RDS for Oracle instances can now use SSL as long as the instances have the SSL option installedSending email over SMTPS:You can now integrate with Amazon SES to send emails from your database instances and any other generic SMTPS with which the provider can be integratedThese are just a few high-level examples of new use cases that have opened up with the whitepaper. As a reminder, always ensure to have best security practices in place when making use of Outbound Network Access (detailed in the whitepaper).TAGS:NetworkSurya NalluSurya Nallu is a Software Development Engineer on the Amazon RDS for Oracle team.
In December 2016, we launched the Outbound Network Access functionality for Amazon RDS for Oracle, enabling customers to use their RDS for Oracle database instances to communicate with external web endpoints using the utl_http and utl tcp packages, and sending emails through utl_smtp. We extended the functionality by adding the option of using custom DNS […]
Surya Nallu
Amazon RDS Architecture RDS for Oracle