Skip to main content

Set up AWS PrivateLink for SSRS on Amazon RDS

Connect Atlan to your SSRS deployment on Amazon RDS using AWS PrivateLink for secure, private network access without exposing your SQL Server instance to the public internet.

Prerequisites​

  • Your AWS administrator—you may not have the required permissions yourself.

SSRS runs on top of Microsoft SQL Server, so you establish private network connectivity at the SQL Server layer. Follow the instructions to set up a private network link to Microsoft SQL Server on Amazon RDS.

Those steps cover:

  • Copying network settings and creating inbound rules
  • Creating an RDS proxy, if needed
  • Creating a target group and internal Network Load Balancer
  • Creating the VPC endpoint service
  • Allowing Atlan account access
  • Accepting the consumer connection request
  • Requesting the DNS name from Atlan

When following those steps, apply these SSRS-specific settings:

  • Use port 80 (HTTP) or 443 (HTTPS) in security group rules and NLB listeners—not port 1433. Check your Web Service Endpoint URL (for example, http://servername/ReportServer/ReportService2010.asmx) to confirm which applies.
  • Expose only the SSRS Report Server endpoint, not the SQL Server port (1433). Atlan connects to SSRS via its SOAP API, not directly to the underlying SQL Server database.

Verify SSRS connectivity​

Unlike a SQL Server connection, SSRS may still be accessible even if port 1433 is unreachable—as long as port 80 or 443 is open correctly.

After the tunnel is established, confirm SSRS is reachable before configuring the Atlan workflow:

  1. Use the DNS name provided by Atlan (in the format vpce-<hash>-<hash>.vpce-svc-<hash>.<region>.vpce.amazonaws.com) as the hostname.
  2. Verify you can reach the Report Server URL through that hostname—for example: http://<vpce-hostname>/ReportServer/ReportService2010.asmx
  3. A successful response confirms the SSRS web service is reachable. A timeout or connection error at this stage indicates a network issue rather than an SSRS authentication issue.

Next steps​

Set up SSRS: Use the VPC endpoint DNS name as the Windows Host and Server Name when configuring the Atlan workflow.