AWS SSM access to private RDS,
made practical on macOS.

Storm Tunnel turns the secure AWS pattern into a repeatable workflow: your Mac connects through Session Manager to an EC2 instance that can reach private RDS endpoints and internal services.

One-Click RDS Access

Save the instance, AWS profile, region, RDS endpoint, and ports once. Developers connect to localhost without rebuilding a long Session Manager command every time.

Visible Connection State

Tunnel state is always visible. See when a private database tunnel is connected, reconnecting, or blocked by configuration before it turns into a debugging session.

AWS SSM First-Class

Use IAM credentials and Session Manager instead of public IPs, inbound SSH, or shared bastion keys. Built for teams that already trust AWS as the access control plane.

Private & Trusted

In the app, there is no telemetry, no tracking, and no data collection. Your infrastructure remains private. Storm Tunnel respects your privacy completely.

SSH Compatibility

Existing SSH tunnels still work. Import ~/.ssh/config when you need classic bastions or self-managed servers, while keeping AWS SSM as the preferred cloud path.

Fewer Support Requests

Smart pre-flight checks validate connectivity before attempting to connect. Clear error messages reduce troubleshooting time.

AWS Session Manager for private databases.

DevOps engineers can keep RDS in private subnets and give developers a controlled path through an SSM-managed EC2 instance. Developers connect from their database client to localhost; AWS handles the session identity and transport.

  • No inbound SSH or database ports required
  • IAM, AWS profiles, and SSO-friendly access
  • Works with PostgreSQL, MySQL, and Aurora endpoints
  • Session activity can fit existing AWS audit trails
AWS Session Manager configuration settings in Storm Tunnel

Reduce operational friction.

Storm Tunnel lives in your menu bar. Developers can toggle approved RDS and internal service connections without switching context, and infrastructure teams avoid repeating setup instructions in Slack.

  • Global keyboard shortcuts
  • Consistent access patterns
  • One-click connect/disconnect
  • Quick access to connection logs
Storm Tunnel menu bar popup showing quick access to tunnel controls

Clear, actionable notifications.

Stay informed with elegant toast notifications that provide feedback without interrupting your workflow.

Success toast notification showing connection established

Connection success feedback

Info toast notification with helpful information

Helpful status updates

Warning toast notification for configuration issues

Proactive warnings

Error toast notification with clear error message

Clear error messages

  • Non-intrusive native macOS design
  • Auto-dismiss with configurable timing
  • Actionable buttons for quick responses
  • Respects system notification preferences

See Storm Tunnel in Action

A comprehensive look at every feature and workflow.

Menu bar popup showing quick tunnel controls with connect/disconnect buttons and status indicators

Quick access from menu bar

Add new tunnel configuration window with form fields for host, port, and authentication settings

Add new tunnel configurations

Main dashboard showing active tunnel connections with real-time status and connection logs

Monitor all your tunnels

SSH key management interface showing imported keys and keychain integration

Manage SSH keys securely

General settings window with preferences for notifications, startup, and behavior

Customize to your workflow

License and subscription management showing paid features and activation options

Simple license management

Export tunnel configurations modal with format selection and security options

Export and share configurations

Make AWS private access usable.

Use Session Manager for RDS and internal services without making every developer memorize the CLI.

Join the Beta