title: AWS Aurora - failed to connect from a MySQL client (Sequel Pro)
body: <p>I have set up an AWS Aurora cluster like below:</p>
  
  <p><a href="https://i.stack.imgur.com/jtvAC.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/jtvAC.png" alt="Cluster overview"></a></p>
  
  <p><em>Figure 1: Cluster overview</em></p>
  
  <p>All 3 instances in the cluster are in the same VPC, say: <code>vpc-123456</code></p>
  
  <p>Below are the <code>vpc-123456</code>'s settings of:</p>
  
  <ul>
  <li>Network ACL - Inbounds</li>
  </ul>
  
  <p><a href="https://i.stack.imgur.com/7AOQw.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/7AOQw.png" alt="enter image description here"></a></p>
  
  <ul>
  <li>Network ACL - Outbounds</li>
  </ul>
  
  <p><a href="https://i.stack.imgur.com/FtkS4.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/FtkS4.png" alt="enter image description here"></a></p>
  
  <ul>
  <li>Security groups - Inbounds</li>
  </ul>
  
  <p><a href="https://i.stack.imgur.com/lW8Xh.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/lW8Xh.png" alt="enter image description here"></a></p>
  
  <ul>
  <li>Security groups - Outbounds</li>
  </ul>
  
  <p><a href="https://i.stack.imgur.com/uj8BP.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/uj8BP.png" alt="enter image description here"></a></p>
  
  <p>As you may have seen, for <code>Network ACL</code>, I accept all traffic for inbounds and outbounds while for <code>Security groups</code>, I accept traffic on port <code>3306</code> and leave open for outbounds.</p>
  
  <p>But when I try to connect to the cluster using <code>Sequel Pro</code>, I got this error: </p>
  
  <pre><code>Unable to connect to host ... because access was denied.
  
  Double-check your username and password and ensure that access from your current location is permitted.
  
  MySQL said: Access denied for user 'Administrator'@'&lt;my ip&gt;' (using password: YES)
  </code></pre>
  
  <p><a href="https://i.stack.imgur.com/TYXXO.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/TYXXO.png" alt="enter image description here"></a></p>
  
  <p>Where <code>Administrator</code> is the account that I am currently using to set up my cluster, as you can see at the upper right corner of <code>Figure 1</code>.</p>
  
  <p>My questions:</p>
  
  <ol>
  <li>Is is right to use <code>Administrator</code> to connect to the cluster using <code>Sequel Pro</code>? Or I have to create another IAM account?</li>
  <li>The endpoint to connect to is <code>Writer</code> or <code>Reader</code> in <em>Figure 1</em>? I have tried all endpoints in both cluster and instances but nothing works.</li>
  </ol>
  
  <p>I've been stuck with this for 2 days but still cannot find a solution. </p>
  
  <p>Regards,</p>