The security group rules need to allow both devices to talk to each other. Also you can have VPC security rules as well. Also MySQL can be restricted to only allowing accounts to be accessible from specific IP's. I imagine Aurora is similar. https://dba.stackexchange.com/questions/80701/how-to-allow-remote-connections-to-mysql-from-specific-ips-only It could be so many things.
... View more