{ Abhilash Kumar Bhattaram : Follow on LinkedIn }

If you've spun up an Oracle Cloud Infrastructure (OCI) Always Free MySQL DB System, you've probably noticed something deliberate about how it's configured: it only exposes a private IP address.

For demostration purposes I have created a OCI MySQL DB System with a public subnet but it exposes only the Private Subnet and this is how it must be designed from cloud a security standpoint .

There's no public endpoint to point a client at from your laptop. That's a good security default — but it means you need a way to reach a database that, by design, nothing outside its own network can see.

This post walks through two things: