title: how to allow ECS task access to RDS
body: <p>I have an ECS task executed from a Lambda function.  This task will perform some basic SQL operations (e.g. SELECT, INSERT, UPDATE) on an RDS instance running MySQL.  What is the proper way to manage access from the ECS task to RDS?</p>
  
  <p>I am currently connecting to RDS using a security group rule where port 3306 allows a connection from a particular IP address (where an EC2 instance resides).</p>
  
  <p>I am in the process of moving this functionality from EC2 to the ECS task.  I looked into IAM policies, but the actions appear to manage AWS CLI RDS operations, and are likely not the solution here.  Thanks!</p>