Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [amazon-vpc]

Amazon Virtual Private Cloud (Amazon VPC) lets you provision a logically isolated section of the Amazon Web Services (AWS) Cloud where you can launch AWS resources in a virtual network that you define

3
votes
1answer
181 views

What is a good subnet strategy for AWS VPC? [on hold]

I currently have each VPC per cluster (stg, prd, tst, misc) and the standard clusters (stg, prd) have these subnets: elb: for public elb(s) that will received direct public traffic elb-int: for ...
3
votes
1answer
30 views

AWS lambda fails to access internet, despite having proper IGW, NAT and routing table entries?

I am experimenting with AWS Lambda, with a small piece of code that would fetch some files from S3. Unfortunately I cannot even access internet resources when I put my Lambda function into a VPC, ...
0
votes
1answer
53 views

NAT setup on AWS

This might sound ridiculous for some, but am trying to setup NAT on lightsail so that I can access my private ec2 instances which are connected using VPC peering. Suppose if 172.31.x.x is my ...
0
votes
2answers
56 views

AWS Instance accept connection from VPN in same VPC [closed]

I did setup an OpenVPN server, which works fine and the IP of the server shows instead of my machine's IP. I am using this VPN to connect to EC2 instance, and restricting access to only instances ...
0
votes
2answers
49 views

AWS VPC : Enable public access for application(s) running on private ip addresses

We have a few Couchbase databases running on EC2 instance(s) running within a AWS VPC. Our apps are on a different VPC. The app layer talks to the Database via VPC peering. Couchbase provides a web ...
1
vote
1answer
18 views

Restricting S3 access to individual servers when using S3 endpoint in private VPC with no public IPs

Question How can you restrict access to an S3 bucket to a single AWS instance when the instances have no public IP address and you're using an S3 endpoint in your VPC? Background and Detail We have ...
0
votes
2answers
29 views

AWS queries regarding subnetting and routing

I have some queries regarding AWS setup please clarify. I have created a VPC with CIDR 172.16.0.0/16 which is a private range of IP's. In my route table, I routed all the traffic from this range. ...
0
votes
1answer
26 views

Using Terraform for every region in a given account, find all VPCs and for each VPC enable flow logs

In Terraform how to populate the list of VPC IDs into the map. I want to find all VPCs for every region in a given account and for each VPC enable flow logs.How this can be done using Terraform
0
votes
1answer
42 views

Export my whole AWS architecture into file?

In AWS, I have a VPC with many components inside, including subnets, security groups, gateways, load balancers, target groups, many instances, and others. Is there any ways to export my whole ...
1
vote
1answer
92 views

Getting issue with VPC in Lambda function

I have attached VPC and private subnets in Lambda function. That is causing the connection issue with the API Gateway/other AWS services. Can anyone suggest the solution for this? Thank you.
0
votes
1answer
51 views

Amazon EKS: how to configure S3 access for worker nodes?

How can I configure an EKS cluster to automatically allow S3 access from worker nodes? I've set up an EKS cluster following the Getting Started guide and have run the example Guest Book app. Now I ...
0
votes
1answer
36 views

Connecting two AWS Peering Connections

I have an AWS Lightsail instance (deployed in AWS Managed VPC) that I want to connect to my Mongo ATLAS (deployed in Mongo Managed VPC). I was able to connect my AWS Services (Lambda, API Gateway) to ...
1
vote
2answers
50 views

How to connect with multi region private subnets through single VPN?

I had created 3 VPC's in three regions and I configured VPC peering between this 3 regions and it's working fine I can ping all the servers from any region through private ip's, I had configured ...
1
vote
1answer
69 views

Test connectivity to NAT Gateway over firewall.

I created a VPC in aws and added a NAT Gateway so my instances in the VPC can consume other resources on the internet. Some of these resources belong to a 3rd party and are behind a firewall for ...
0
votes
2answers
26 views

How to set up AWS Network Access Control List for SSH to private subnet

I'm doing a course on AWS. What I'm trying to do is set up a VPC with two Linux servers. I've set up the VPC with two subnets. I have put one server in each. The idea is that one subnet is public the ...
1
vote
1answer
34 views

AWS private subject cannot hit S3 using VPC endpoint

I have a private subnet in my VPC. I've sshed into this instance from a public subnet. Using a nat gateway, I'm able to run aws s3 ls and see all my buckets with no issues. Once I delete the nat ...
0
votes
1answer
48 views

Instance in private subnet can connect internet but can't ping/traceroute

I have an AWS VPC with some public subnets and a private subnet, like the image below. Both instances can connect to the internet (INSTANCE A connects through NAT GATEWAY instance) NAT GATEWAY can ...
0
votes
1answer
36 views

Connecting from an AWS Lambda function or service within a VPC to a customer's private network over VPN tunnel

We are currently running AWS Lambda functions within a VPC and for example already have a peering connection setup to MongoDB Atlas to have our AWS Lambda's within the VPC communicate to our MongoDB ...
0
votes
3answers
89 views

Do you need or you don't need an IGW to get access to the internet if you create a EC2 instance with an EIP

I’m confused about Internet Gateway in AWS, if it says that in order for your VPC to access the internet you need a IGW why then when you create a EC2 instance with an EIP you automatically have ...
0
votes
1answer
66 views

Access other AWS VPC Instances but OpenVPN server

I've configured OpenVPN server on Bastion instance in public subnet on AWS VPC. Right now, I have access private IP address of that instance with my OpenVpn client, but we want to access EC2 ...
0
votes
0answers
9 views

failed to create: [MyElastiCache] when trying to add ElastiCache to Elastic Beanstalk deployment

I'm trying to add ElastiCache to my rails deployment on Elastic Beanstalk. I've followed the instructions, but am getting the following error when trying to deploy: Uploading: [#######################...
0
votes
1answer
47 views

How can you connect two Amazon VPCs through VPC peering if they are already configured with the network IPs?

According to AWS documentation you can connect up to 50 VPC through VPC peering but you have to make sure there's not IP overlapping so my questions here are: How can you come up with so many ...
0
votes
1answer
26 views

Install packages from internet for VPC with no outside access

Have a VPC with a private subnet. Inside the VPC, am looking to update latest Anaconda packages using Conda which involves downloading the latest updates from internet. Since my VPC has no internet ...
0
votes
0answers
20 views

How does creating an S3 endpoint affect other resources using S3?

I've just created a Lambda in AWS that requires access to RDS and, as a result, has to be a VPC Lambda function instead of a regular one. As I understand it, this means I basically have no choice but ...
0
votes
1answer
37 views

Adding ip to connect to RDS 'not Publicly accessible'

I would like to allow access to an RDS for a group of ip's outside the VPC (devs using workbench). However, I would like to leave 'Publicly Accessible' disabled. Is there a way to do this? Config: ...
0
votes
0answers
35 views

Can I use AWS API Gateway for proxying a subset of my base path api's to one vpc and all others to another vpc

I have multiple API's with varying base paths all on the same subdomain. e.g : api.example.com/user/pay api.example/partner/requestpay api.example.com/partner/discount/create api.example.com/...
0
votes
1answer
15 views

Issue connecting EC2 instances in 2 separate VPCs (same region)

I have 2 VPCs (default and special) each hosting 1 EC2 instance. Both instances have the same security group (say name = internal). The security group allows All Traffic from internal (a circular ...
0
votes
0answers
31 views

Connecting to RDS, created by custom VPC, using MySQL Workbench

I need to get an RDS in region X connected by Elastic Beanstalk from regions Y and Z. I have created RDS in a custom VPC. I need to connect to this RDS from my mac using MySQL Workbench. For VPC, ...
0
votes
0answers
25 views

How to access this RDS server in an AWS VPC

I have a typical web application with a web server (PHP) and a database. It is on a new AWS account, not the EC-Classic style. I want to be able to access the database server from my desktop using a ...
0
votes
1answer
17 views

Get the current VPC from CLI within the EC2 instance

How is it possible to display the current VPC from the CLI within a running Linux (Debian) EC2 instance?
0
votes
0answers
68 views

How an Ec2 node can contact eni of a different node in different AWS account and vpc

I have a requirement that one of my EC2 instance's originating traffic to a specific ip address needs to land to a ENI of a different EC2 instance which is present in different account and different ...
-1
votes
2answers
56 views

In AWS VPC subnet id changed

I deleted the default subnet in my VPC and tried to create new. After creating the new subnet it showed a different subnet id, as you would expect. When I try to create subnet group in RDS the ...
0
votes
1answer
37 views

AWS - VPC and subnet group

In order to create RDS, I need to create a VPC and two subnets attached to it. If I choose 10.0.0.0/16 as IPv4 CIDR for VPC, can you please suggest IPv4 CIDR blocks for the two subnets that I have to ...
0
votes
1answer
53 views

Is it possible to share same AWS Elastic IP addresses between two and more VPC?

I have "VPC-A" with NAT and attached Elastic IP address. Couple of services are running inside under load and couldn't be easily moved. Also I have "VPC-B" with own NAT for subnet and, of course, ...
2
votes
1answer
56 views

Public hosted zone records don't work inside VPC

I have some public hosted zone records defined in Route 53. They work normally accessed from any computer, but when accessed from an instance in my production vpc (or any other vpc of my account), it'...
1
vote
0answers
90 views

How do I send logs from a VPC without an internet gateway/VPC endpoint to CloudWatch Logs?

I have a only one VPC which has an internet gateway. We'll call it the main VPC. The other VPCs are connected to the main VPC through a VPC peering connection. There is no public access to those VPCs. ...
1
vote
1answer
78 views

SSH connection between two server after VPC Peering

I am trying to configure SSH connection between two server on two different VPC on my same account. VPC1: vpc-ba8ce8d2 172.31.0.0/16 rtb-576e373f acl-0dbefa65 VPC2: vpc-0c5fc020e4f30283d 10.0.0.0/...
1
vote
2answers
41 views

Connecting to an EC2 instance with custom FW rules

I created a VPC with one Public subnet. Internet gateway was created and attached to the route table associated with Public Subnet. Linux EC2 instance was launched in the public subnet of the VPC ...
1
vote
1answer
39 views

Migrate AWS EIP across VPC

I am creating a new VPC in our AWS account because the local CIDR has to change to support VPC cross region peering. I have public EIP's that I need to migrate over to the new VPC. Is it possible to ...
0
votes
1answer
84 views

Use cases for protected subnets

I'm reading through some blog posts and articles on aws vpc design to see if there are perhaps improvements to be made to a setup currently on aws when I came across an article making mention of "...
1
vote
1answer
457 views

inter-cloud vpn tunneling (AWS and Azure)

I'm trying to establish a VPN site-to-site between a VPC in Amazon Web Services and a VNet in Microsoft Azure. For that I'd like to use AWS' Virtual Private Gateway on one side and Azure's Virtual ...
0
votes
2answers
228 views

Does AWS RDS read replication require peering?

If you create an RDS instance in one region with a read replica in another (in private VPCs, no public access), is it required to peer the private VPCs for replication to occur or does AWS magically ...
0
votes
1answer
473 views

ssh operation timed out on ec2 instance

I am having a problem connecting with my Ubuntu 16.04 ec2 instance on aws. I have added my public key to authorized keys file and also added my ip for ssh access on port 22 using Myip. I am trying ...
2
votes
2answers
526 views

Data transfer speed between AWS regions

Does anyone know what sort of data transfer speed we should be seeing on a VPC peering connection between 2 AWS regions (in this case us-west-2 and eu-west-2)? We tested this a couple of weeks ago, ...
0
votes
1answer
74 views

Security Policy best practice for connecting to an RDS instance in a different VPC

I currently have 2 VPCs set up on the same Amazon account, in the same region. Lets call them vpc-111111 and vpc-222222 for illustration. I have a public RDS server running in vpc-111111 (along with ...
2
votes
0answers
254 views

AWS console - This site cannot be reached - Only on my PC

I have an AWS insatance and whenever I go to the console page, ie: https://us-west-2.console.aws.amazon.com on a browser I get the message: This site can’t be reached us-west-2.console.aws.amazon....
0
votes
1answer
32 views

AWS Rouet 53 Private Hosted Zone route traffic to Ec2 hosted on Private Subnet?

I have below question: I want to host Web Server but want to make sure external (user accessing the web server over internet) DNS resolution should go via organization Data Center. Data Center is ...
1
vote
1answer
309 views

Using boto in an AWS lambda function in a VPC

I have a lambda that accesses EC2. I want to assign it to a VPC for security purposes, but when I do boto just stops working. Here's a minimal example: ec2 = boto3.resource('ec2', region_name='eu-...
0
votes
0answers
80 views

Unable to Resolve Machine Names via Domain Controller

I have two Amazon AWS VPC's connected via a peering connection, where I have enabled DNS resolution between them like so: I am also using an internal domain controller to provide DNS using the AWS ...
1
vote
1answer
149 views

AWS Network ACLs Breaking SSH Connectivity

I'm trying to set up Network ACLs as a second security layer for production instances. It seems that every time I associate a non-default Network ACL to my private subnet it breaks all SSH ...