socksify-container

Connect database via SOCKS5 Proxy

Usage (PostgreSQL)

Build container

docker build . -f psql.dockerfile -t psql

Prepare envfile

Put environment.txt

PGUSER=john.doe
PGHOST=db.example.com
PGDATABASE=database_name
cluster_name=my-bastion-cluster

Export AWS Credentials

Use the AWS credentials file or aws-vault.

Run bastion container

In whatever way, launch a SOCKS5 Proxy container like dante-server.

Keep the ECS task's ARN.

task_arn=arn:aws:ecs:YOUR_REGION:YOUR_ACCOUNT_ID:task/CLUSTER_NAME/TASK_ID

Execute container

docker run -it --env-file environment.txt -e AWS_ACCESS_KEY_ID -e AWS_SECRET_ACCESS_KEY -e AWS_SESSION_TOKEN -e task_arn=$task_arn psql:latest

Using aws-vault:

aws-vault exec PROFILE_NAME -- docker run -it --env-file environment.txt -e AWS_ACCESS_KEY_ID -e AWS_SECRET_ACCESS_KEY -e AWS_SESSION_TOKEN -e task_arn=$task_arn psql:latest