Connect to a remote MYSQL via SSH tunnel or a private IP

Question & Answer
3

Thank you @ankgp .

  1. I created a connection to my private VPC
  2. I added the relevant security groups to my EC2 (enabling access only from the QS subnet IPs)
  3. I added a special SQ user with relevant permissions to the MySQL schema
  4. I had to update my.cnf and disable bind-address, to allow connections from QS
  5. I did not use SSL for the connection between QS and my EC2 MySQL

The following information pages were helpful too: