title: Why can't I connect to a new AWS Aurora Serverless instance from my PC?
body: <p>Trying to set up a vanilla AWS RDS Aurora Serverless instance.</p>
  <p>For now, I just want to connect to it directly from my PC as a sanity check, but I'm unable to do so. Every time I connect via <code>$ mysql</code>, it hands for a few minutes. Then I get:</p>
  <pre><code>$ mysql -h &lt;MY-DATABASE&gt;.cluster-deadbeef.us-west-1.rds.amazonaws.com -P 3306 -u admin -p
  ERROR 2003 (HY000): Can't connect to MySQL server on '&lt;MY-DATABASE&gt;.cluster-deadbeef.us-west-1.rds.amazonaws.com' (60)
  </code></pre>
  <p>(nc also just times out)</p>
  <p>Looks like there's a network connectivity I've made somewhere, but I'm not sure where.</p>
  <p>Here's the entire setup (think I've included everything relevant?):</p>
  <ul>
  <li><p><strong>Database Instance:</strong></p>
  <pre><code>$ aws rds describe-db-clusters --output json | jq '.DBClusters[0] | {AvailabilityZones, DBSubnetGroup, VpcSecurityGroups}'
  {
    &quot;AvailabilityZones&quot;: [
      &quot;us-west-1c&quot;,
      &quot;us-west-1b&quot;
    ],
    &quot;DBSubnetGroup&quot;: &quot;default-vpc-0165fd69fae5d2569&quot;,
    &quot;VpcSecurityGroups&quot;: [
      {
        &quot;VpcSecurityGroupId&quot;: &quot;sg-051e6ad0fe8837a56&quot;,
        &quot;Status&quot;: &quot;active&quot;
      }
    ]
  }
  </code></pre>
  </li>
  <li><p><strong>VPC:</strong></p>
  <pre><code>$ aws ec2 describe-vpcs --output json | jq '.Vpcs[0] | {VpcId, CidrBlock, CidrBlockAssociationSet}'
  {
    &quot;VpcId&quot;: &quot;vpc-0165fd69fae5d2569&quot;,
    &quot;CidrBlock&quot;: &quot;10.0.0.0/16&quot;,
    &quot;CidrBlockAssociationSet&quot;: [
      {
        &quot;AssociationId&quot;: &quot;vpc-cidr-assoc-0fe35851049a94f32&quot;,
        &quot;CidrBlock&quot;: &quot;10.0.0.0/16&quot;,
        &quot;CidrBlockState&quot;: {
          &quot;State&quot;: &quot;associated&quot;
        }
      }
    ]
  }
  </code></pre>
  </li>
  <li><p><strong>VPC Subnets:</strong></p>
  <pre><code>$ aws ec2 describe-subnets --output json | jq '.Subnets[] | {AvailabilityZone,AvailabilityZoneId,CidrBlock,VpcId}'  
  
  {
    &quot;AvailabilityZone&quot;: &quot;us-west-1c&quot;,
    &quot;AvailabilityZoneId&quot;: &quot;usw1-az1&quot;,
    &quot;CidrBlock&quot;: &quot;10.0.1.0/24&quot;,
    &quot;VpcId&quot;: &quot;vpc-0165fd69fae5d2569&quot;
  }
  {
    &quot;AvailabilityZone&quot;: &quot;us-west-1b&quot;,
    &quot;AvailabilityZoneId&quot;: &quot;usw1-az3&quot;,
    &quot;CidrBlock&quot;: &quot;10.0.0.0/24&quot;,
    &quot;VpcId&quot;: &quot;vpc-0165fd69fae5d2569&quot;
  }
  </code></pre>
  </li>
  <li><p><strong>Security Group:</strong></p>
  <p>Yes this is totally wide open for now, still can't connect :(</p>
  <pre><code>$ aws ec2 describe-security-groups --output json | jq '.SecurityGroups[]'
  {
    &quot;IpPermissions&quot;: [
      {
        &quot;IpProtocol&quot;: &quot;-1&quot;,
        &quot;IpRanges&quot;: [
          {
            &quot;CidrIp&quot;: &quot;0.0.0.0/0&quot;
          }
        ],
        &quot;Ipv6Ranges&quot;: [
          {
            &quot;CidrIpv6&quot;: &quot;::/0&quot;
          }
        ],
        &quot;PrefixListIds&quot;: [],
        &quot;UserIdGroupPairs&quot;: [
          {
            &quot;GroupId&quot;: &quot;sg-051e6ad0fe8837a56&quot;,
          }
        ]
      },
      {
        &quot;FromPort&quot;: 3306,
        &quot;IpProtocol&quot;: &quot;tcp&quot;,
        &quot;IpRanges&quot;: [
          {
            &quot;CidrIp&quot;: &quot;0.0.0.0/0&quot;
          }
        ],
        &quot;Ipv6Ranges&quot;: [
          {
            &quot;CidrIpv6&quot;: &quot;::/0&quot;
          }
        ],
        &quot;PrefixListIds&quot;: [],
        &quot;ToPort&quot;: 3306,
        &quot;UserIdGroupPairs&quot;: []
      }
    ],
    &quot;GroupId&quot;: &quot;sg-051e6ad0fe8837a56&quot;,
    &quot;IpPermissionsEgress&quot;: [
      {
        &quot;IpProtocol&quot;: &quot;-1&quot;,
        &quot;IpRanges&quot;: [
          {
            &quot;CidrIp&quot;: &quot;0.0.0.0/0&quot;
          }
        ],
        &quot;Ipv6Ranges&quot;: [],
        &quot;PrefixListIds&quot;: [],
        &quot;UserIdGroupPairs&quot;: []
      }
    ],
    &quot;VpcId&quot;: &quot;vpc-0165fd69fae5d2569&quot;
  }
  </code></pre>
  </li>
  <li><p><strong>Route Table:</strong></p>
  <pre><code>$ aws ec2 describe-route-tables --output json | jq '.RouteTables[]'   
  {
    &quot;Associations&quot;: [
      {
        &quot;Main&quot;: true,
        &quot;RouteTableAssociationId&quot;: &quot;rtbassoc-0aebc4a882b0cd2a5&quot;,
        &quot;RouteTableId&quot;: &quot;rtb-0ce6ee26652736941&quot;,
        &quot;AssociationState&quot;: {
          &quot;State&quot;: &quot;associated&quot;
        }
      },
      {
        &quot;Main&quot;: false,
        &quot;RouteTableAssociationId&quot;: &quot;rtbassoc-047d54469da606a50&quot;,
        &quot;RouteTableId&quot;: &quot;rtb-0ce6ee26652736941&quot;,
        &quot;SubnetId&quot;: &quot;subnet-0744475e288c0424c&quot;,
        &quot;AssociationState&quot;: {
          &quot;State&quot;: &quot;associated&quot;
        }
      },
      {
        &quot;Main&quot;: false,
        &quot;RouteTableAssociationId&quot;: &quot;rtbassoc-08c5ea54642014c95&quot;,
        &quot;RouteTableId&quot;: &quot;rtb-0ce6ee26652736941&quot;,
        &quot;SubnetId&quot;: &quot;subnet-0b9c99ff38b860725&quot;,
        &quot;AssociationState&quot;: {
          &quot;State&quot;: &quot;associated&quot;
        }
      }
    ],
    &quot;RouteTableId&quot;: &quot;rtb-0ce6ee26652736941&quot;,
    &quot;Routes&quot;: [
      {
        &quot;DestinationCidrBlock&quot;: &quot;10.0.0.0/16&quot;,
        &quot;GatewayId&quot;: &quot;local&quot;,
        &quot;Origin&quot;: &quot;CreateRouteTable&quot;,
        &quot;State&quot;: &quot;active&quot;
      },
      {
        &quot;DestinationCidrBlock&quot;: &quot;0.0.0.0/0&quot;,
        &quot;GatewayId&quot;: &quot;igw-0f8ad7dfe1eaa0c67&quot;,
        &quot;Origin&quot;: &quot;CreateRoute&quot;,
        &quot;State&quot;: &quot;active&quot;
      }
    ],
    &quot;VpcId&quot;: &quot;vpc-0165fd69fae5d2569&quot;,
  }
  </code></pre>
  </li>
  </ul>
  <p>What am I missing?</p>
  <p>thanks!!</p>