Enable Secure Remote MySQL Access for AIQ Environments

Last reviewed: September 22, 2026

Use this article when an AIQ environment requires remote MySQL access for administration, diagnostics, or integrations. Apply least-privilege network and account controls.

Recommended guidance

• Confirm remote access is required; prefer local or bastion access when possible.
• Restrict bind address, firewall rules, and database grants to approved sources.
• Use TLS and secret management where supported.

Validation workflow

1. Identify the client host, database host, port, and approved access path.
2. Update MySQL bind and firewall settings only for the required network scope.
3. Create or update a least-privilege database account for the task.
4. Test connectivity from the approved source and verify logs.
5. Remove temporary access after the maintenance window when applicable.

Note: Opening MySQL broadly to the network is unsafe. Never use 0.0.0.0 access without compensating controls and approval.

Last updated: September 22, 2026

If you have feedback on this topic, contact documentation@appvance.ai.