I have a only one VPC which has an internet gateway. We'll call it the main VPC. The other VPCs are connected to the main VPC through a VPC peering connection. There is no public access to those VPCs.

I'm not in a region where it is possible to create a VPC Endpoint for CloudWatch.

What should I do?

  • I wonder if you can create a route table entry in the "other vpc" from to the main VPC, and from there traffic out to the internet gateway from there. You will incur data transfer fees. You might be better off putting an internet gateway in your "other VPC" and using security groups / NACLs to limit them rather than routing things around.
    – Tim
    May 18 '18 at 1:02
  • I'm not sure how to define such setup.
    – the_drow
    May 24 '18 at 8:55
  • Also, I'm not sure how to limit the access to CloudWatch logs if I do create an internet gateway on the other VPC.
    – the_drow
    May 24 '18 at 8:56
  • You might be best off hiring an AWS consultant to help.
    – Tim
    May 24 '18 at 9:17

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.