Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [amazon-vpc]

Amazon Virtual Private Cloud (Amazon VPC) lets you provision a logically isolated section of the Amazon Web Services (AWS) Cloud where you can launch AWS resources in a virtual network that you define

0
votes
3answers
26 views

Can't access EC2 instance, but not NLB in other VPC

I've recently started the process of switching from AWS ELB to NLB, and I'm facing some connectivity issues. We have 2 VPCs. In VPC1, both EC2 database servers, old ELB and NLB is located. In VPC2, ...
1
vote
2answers
55 views

ec2 not able to a ping google.com

We created new vpc for our new architecture and vpc has 4 subnets in that private 2 and public 2. Private and public one will be Mumbai A and Mumbai B region. If I Try to do ping google.com from ...
0
votes
1answer
29 views

AWS Lambda needs to be moved in different Subnet

I have a Lambda function that is in VPC-A and Subnet 1A and 2A. I want to move it to Subnet 1b and 2B. The command below is giving error: aws rds modify-db-subnet-group --db-subnet-group-name "XXXX" ...
0
votes
1answer
17 views

Connecting two AWS VPCs in different regions

I have 2 VPC's in different regions (Virginia and Ohio) They both have IP ranges of: 172.31.0.0/16 Do I need to change the IP ranges of one region? How would I do that if I already have servers ...
0
votes
0answers
16 views

Migrating from a public elastic cluster to VPC cluster

I currently, have one public elastic cluster with one data node(m3.xlarge.elasticsearch) which is working fine. I would like to move from the public domain to VPC based domain. I was able to take a ...
0
votes
1answer
39 views

AWS - EC2 : How to use a different public address for outbound connections [closed]

I have an AWS Ubuntu EC2 instance with an elastic IP address assigned to it and running a web application. I would like to run a web scraping script on my server and I do not prefer my server / ...
1
vote
0answers
23 views

AWS VPC EC2 Setting AD DNS Custom DNS for instance running in another VPC

Here is my scenario: 1. I have two peered VPCs VPC1 which is running Active Directory integrated DNS Service with my domain as example.local. There is another VPC2 which has both VPC DNS with ...
1
vote
1answer
19 views

User assigned IAM Admin role cannot see VPCs

In AWS, I created a user and gave this user AdministratorAcess permissions. The way I understand it, this user can do everything the root administrator can: clicking on the AdministratorAccess ...
1
vote
0answers
40 views

How to route traffic from VPC to another by following set of constraints in AWS

Here I have the scenario shown in the figure below, in which there are 3 VPCs. Each VPC hosts 1 VM and CSR 1000v, except VPC2 where there is only CSR. CSRs of both VPCs are able to communicate with ...
2
votes
1answer
91 views

CodeBuild behind VPC can't access CloudWatch endpoint

I have a CodeBuild project that is setup to use a VPC so it can access RDS. I setup a "VPC Endpoint" for com.amazonaws.us-east-1.s3 so CodeBuild can access CodePipeline output artifacts. This is ...
0
votes
0answers
20 views

How to do Static routing EC2 linux-based VM and CSR 1000v

I'm having the following. In VPC 1, there are CSR 1000v and EC2 linux-based VM. I would like to do static route in order that VM1 and CSR could connect to each other. I'm allowing all ICMP traffic ...
0
votes
0answers
13 views

Implementing a scenario in AWS that involves CSR 1000v and network functions

I have the following scenario, which I would like to have it in AWS. The model contains three layers, each layer has its nodes and connections as basic network elements. In the functional layer ...
2
votes
1answer
144 views

CodeBuild with VPC settings fails to download CodeCommit source

I originally had a simple CodePipeline setup triggered by commits to a CodeCommit repo, with a "Stage" that output the source code as an artifact and another "Stage" using CodeBuild to run some code ...
2
votes
2answers
20 views

Aws routing table - Static routing

Amidst configuration of AWS routing table, AWS console allow static routing only. As mentioned here, every VPC has an implicit router. Assuming there is a public and private subnet configured ...
10
votes
1answer
691 views

AWS NAT vs AWS IGW vs AWS Router

As per this answer, router and gateway are same devices, in terms of functionality. In AWS world, we have internet gateway, NAT gateway and router Are these three not the same?
5
votes
2answers
184 views

How to pick AWS CIDR within the CIDR ranges of VPC?

When i try to add a new subnet in my VPC I get this message: 172.22.128.0/24 CIDR is not within the CIDR ranges of VPC. My current VPC CIDR is 172.22.130.0/28 Any help?
1
vote
1answer
21 views

How to assign a private IP dynamically generated with AWS Cloudformation?

I have an AWS Cloudformation, and I want two EC2 instances A and B on a private subnet under the same VPC. In the application, I need A to access B. How can I configure A with the dynamically ...
0
votes
1answer
51 views

AWS Security group for restricting inbound traffic from private subnet

I have a load balancer with public IP, which delegates calls to two EC2 web servers on a private subnet in AWS VPC. For redundancy reasons, each on a separate private subnet. Let them be denoted as A1,...
0
votes
0answers
19 views

Scaling VXLAN overlay without too many tunnels

I'm trying to setup a simple but scalable overlay network sing VXLAN tunnels but having too many VTEPs leads to many many tunnels and I don't know how that can be a good idea. I asked a question ...
0
votes
0answers
28 views

Whitelisting IPs for AWS VPC to bypass VPN

We have a AWS VPC with public and private subnets. And the OpenVPN server is running in a public subnet and its is used to connect to instances in private subnet. Now, we want to whitelist couple of ...
1
vote
1answer
69 views

Can not ping interface's public address of my instances

I have basically 2 VPCs where CSR 1000v is deployed in each VPC (CSR1 and CSR2). I attach a drawing my setup below. I created 2 interfaces in deferent subnets within its VPC CIDR in each VM and ...
1
vote
3answers
157 views

Public and private subnet in VPC

IANA established certain blocks of IP as private IP range(shown below) 10.0.0.0 – 10.255.255.255 (255.0.0.0) 172.16.0.0 – 172.31.255.255 (255.255.0.0) 192.168.0.0 – 192.168.255.255 (...
1
vote
1answer
18 views

How can I list private zones associated with a VPC that are hosted in another account?

I can use a set of AWS API commands to associate a VPC with a private zone hosted in another account. That way, name resolution works in the VPC even for the zones that are defined elsewhere. Here'...
1
vote
1answer
157 views

Does RDS in private subnet inside AWS VPC need a NAT instance/gateway?

I have hosted an AWS RDS inside the private subnet of the VPC. While creating the VPC with public and private subnets, I had to create a NAT instance. I know NAT instance is mainly for private ...
0
votes
0answers
29 views

why traceroute shows only one direct connection instead of 2?

I have got 4 CSR Cisco 1000v deployed in VMs on AWS. I could ping the Primary network interface of each VM from any instance in the network, but when I try traceroute it is not successful. The VMs ...
2
votes
1answer
87 views

How to Virtual static routing in CSR 1000v on AWS?

I'm trying to do static routing for 2 Cisco CSR 1000v routers which are deployed on 3 VMs in AWS, but it didn't work. I configured correctly 2 interfaces of both routers, but when I tried to ping the ...
2
votes
1answer
95 views

How to add a physical connections to Cisco CSR 1000 in AWS?

I deployed 2 Cisco CSR 1000 routers in one VPC-1 at a region A, and at region B I deployed another one. I would like to make a physical connection between these 3 routers. Also, I tried to ping ...
3
votes
2answers
83 views

Cannot Git Pull From Inside AWS Private Subnet

I am using two public subnets in two availability zones, and then two private subnets in those same availability zones. I have an elastic load balancer that forwards traffic to my EC2 instances in the ...
0
votes
1answer
103 views

Laravel Forge: Unable to create AWS EC2 instance in London Region

When I try to create a server on Laravel Forge for AWS in the London region I get the following error message: Whoops! There were some problems with your input. The server provider was unable ...
0
votes
2answers
341 views

AWS: reduce nat gateway costs for a small system

I am setting up infrastructure for a startup which pretty much will not have a lot of traffic, but should be able to scale when needed. We are favouring a setup with a LB, that distributes traffic ...
0
votes
3answers
46 views

What happens if the private IP range of a VPC falls outside the IANA defined ones?

The VPC documentation says: When you create a VPC, we recommend that you specify a CIDR block (of /16 or smaller) from the private IPv4 address ranges as specified in RFC 1918: 10.0.0.0 - ...
4
votes
1answer
319 views

IP Address exhaustion for lambdas in VPC

I am currently part of a group that is dealing with the repercussions of deploying 300+ AWS Lambda functions running Node.js in place of a more traditional REST API. I recently implemented an ...
2
votes
1answer
176 views

How to get AWS public IP CIDR range of a VPC

I have a VPC running on AWS which was created using kops, and the databases are running on mongo-atlas using GCP as a cloud provider. The mongo database servers are open to the world, what I'm trying ...
2
votes
1answer
159 views

An Issue with an AWS EC2 instance when connecting it to WebSocket

As I tried to run the chat app from localhost connected to MySQL database which had been coded with PHP via WebSocket it was successful. Also when I tried to run from the PuTTY terminal logged into ...
3
votes
1answer
227 views

What is a good subnet strategy for AWS VPC? [closed]

I currently have each VPC per cluster (stg, prd, tst, misc) and the standard clusters (stg, prd) have these subnets: elb: for public elb(s) that will received direct public traffic elb-int: for ...
3
votes
1answer
44 views

AWS lambda fails to access internet, despite having proper IGW, NAT and routing table entries?

I am experimenting with AWS Lambda, with a small piece of code that would fetch some files from S3. Unfortunately I cannot even access internet resources when I put my Lambda function into a VPC, ...
0
votes
1answer
95 views

NAT setup on AWS

This might sound ridiculous for some, but am trying to setup NAT on lightsail so that I can access my private ec2 instances which are connected using VPC peering. Suppose if 172.31.x.x is my ...
0
votes
2answers
77 views

AWS Instance accept connection from VPN in same VPC [closed]

I did setup an OpenVPN server, which works fine and the IP of the server shows instead of my machine's IP. I am using this VPN to connect to EC2 instance, and restricting access to only instances ...
0
votes
2answers
57 views

AWS VPC : Enable public access for application(s) running on private ip addresses

We have a few Couchbase databases running on EC2 instance(s) running within a AWS VPC. Our apps are on a different VPC. The app layer talks to the Database via VPC peering. Couchbase provides a web ...
1
vote
1answer
40 views

Restricting S3 access to individual servers when using S3 endpoint in private VPC with no public IPs

Question How can you restrict access to an S3 bucket to a single AWS instance when the instances have no public IP address and you're using an S3 endpoint in your VPC? Background and Detail We have ...
0
votes
2answers
33 views

AWS queries regarding subnetting and routing

I have some queries regarding AWS setup please clarify. I have created a VPC with CIDR 172.16.0.0/16 which is a private range of IP's. In my route table, I routed all the traffic from this range. ...
0
votes
1answer
77 views

Using Terraform for every region in a given account, find all VPCs and for each VPC enable flow logs

In Terraform how to populate the list of VPC IDs into the map. I want to find all VPCs for every region in a given account and for each VPC enable flow logs.How this can be done using Terraform
0
votes
1answer
61 views

Export my whole AWS architecture into file?

In AWS, I have a VPC with many components inside, including subnets, security groups, gateways, load balancers, target groups, many instances, and others. Is there any ways to export my whole ...
1
vote
1answer
104 views

Getting issue with VPC in Lambda function

I have attached VPC and private subnets in Lambda function. That is causing the connection issue with the API Gateway/other AWS services. Can anyone suggest the solution for this? Thank you.
1
vote
1answer
542 views

Amazon EKS: how to configure S3 access for worker nodes?

How can I configure an EKS cluster to automatically allow S3 access from worker nodes? I've set up an EKS cluster following the Getting Started guide and have run the example Guest Book app. Now I ...
0
votes
1answer
132 views

Connecting two AWS Peering Connections

I have an AWS Lightsail instance (deployed in AWS Managed VPC) that I want to connect to my Mongo ATLAS (deployed in Mongo Managed VPC). I was able to connect my AWS Services (Lambda, API Gateway) to ...
1
vote
2answers
85 views

How to connect with multi region private subnets through single VPN?

I had created 3 VPC's in three regions and I configured VPC peering between this 3 regions and it's working fine I can ping all the servers from any region through private ip's, I had configured ...
1
vote
1answer
95 views

Test connectivity to NAT Gateway over firewall.

I created a VPC in aws and added a NAT Gateway so my instances in the VPC can consume other resources on the internet. Some of these resources belong to a 3rd party and are behind a firewall for ...
0
votes
2answers
46 views

How to set up AWS Network Access Control List for SSH to private subnet

I'm doing a course on AWS. What I'm trying to do is set up a VPC with two Linux servers. I've set up the VPC with two subnets. I have put one server in each. The idea is that one subnet is public the ...
1
vote
1answer
173 views

AWS private subject cannot hit S3 using VPC endpoint

I have a private subnet in my VPC. I've sshed into this instance from a public subnet. Using a nat gateway, I'm able to run aws s3 ls and see all my buckets with no issues. Once I delete the nat ...