We are running server 2008 R2 and I have a default install of RDS. Is it "safe" out of the box to just expose to the outside world? Or is there special configuration "best practice" to apply in order to have an extra layer of security as far as the connection goes. I wouldn't want the user to have to authenticate more than once.
Any ideas?