Questions tagged [amazon-vpc]

Amazon Virtual Private Cloud (Amazon VPC) lets you provision a logically isolated section of the Amazon Web Services (AWS) Cloud where you can launch AWS resources in a virtual network that you define

Filter by
Sorted by
Tagged with
1
vote
1answer
45 views

AWS VPC Subnet InvalidSubnet.Range only when using Ansible

I have an AWS VPC with a v4 CIDR of 10.0.0.0/16 (I double-checked that CIDR). When I try to create a subnet on AWS using the following ansible task ec2_vpc_subnet: vpc_id: "vpc-<the-non-...
2
votes
2answers
150 views

Is there any way of viewing, in AWS, what ips in a subnet have been allocated?

Is there any way of seeing what ip addresses AWS thinks have been allocated in a subnet? I've run a ping scan, and I've checked our internal ip management software, and there should be more than 8 ips ...
0
votes
0answers
10 views

EC2 public DNS address is redirecting to NOT

I created a Magento Instance in AWS, but as soon as I login to it, so submitting the login, I get redirected to "not/index.php/admin" Now, I don't know about you but I've never seen not as a DNS ...
0
votes
2answers
158 views

AWS VPN Client connection to new VPC Endpoint is failing

I have set up a new VPN following the guide here. However when I try to connect to the VPN with the client i get an error "Connection failed. Try again." This happens every time. I opened the log file ...
0
votes
2answers
104 views

CIDR ipv4 allocation to subnet

I have my VPC configured with 10.0.0.0/16 CIDR. I want to create around 7-10 subnets in this VPC. On my calculation, I have decided to have 8 subnets where each subnet can host 8192 resources (8192*8=...
0
votes
1answer
21 views

CIDR is not within the CIDR ranges of VPC

I have created a custom VPC with CIDR of 10.0.0.0/16. I want to create 2 subnets with 10.1.0.0/16 and 10.2.0.0/16. But I am unable to do. Getting error: CIDR is not within the CIDR ranges of VPC Why ...
0
votes
1answer
82 views

EC2 Instance gateway change automatically

Some of my instances are deployed with code into its /etc/rc.local #!/bin/sh # Managed by puppet - do not modify /sbin/route del default /sbin/route add default gw 11.0.0.254 All works fine at the ...
0
votes
0answers
17 views

Networking security with ACLs and Security Groups

I'm learning AWS currently and building up highly secure VPCs the subnets within them. My question is simple: how can anyone (or thing) theoretically manage to "get past" both/either an ACL and/or ...
1
vote
1answer
44 views

Is there a way to dynamically update a security group from networks in a route table?

kind of surprised there isn't a tighter integration between these two services (i thinking maybe there is but i just missed it) I have a route table with routes to various networks and I also have it ...
0
votes
1answer
34 views

Unable to connect to redis on amazon (same VPC different subnets)

I am trying to set up a Redis cluster using amazon's ElasticCache I have a VPC with the following CIDR: 10.0.0.0/16. Which has five subnets: 2 private - 10.0.3.0/24 and 10.0.1.0/24 3 public - 10.0....
0
votes
1answer
28 views

Routing to a simulated network running inside an AWS Instance

So, we're running a simulated network on a server in AWS and i'm trying to figure our how to enable routing to that simulated network both from inside AWS and from our remote offices. Our VPC CIDR ...
2
votes
1answer
44 views

Separate public subnets for VPN access in my AWS VPC

I'm setting up an AWS VPC, and have carved it up into public, cache, persistence and compute subnets. I plan on separating resources in the following way: Public: ELB and VPN network association ...
0
votes
0answers
79 views

Can't connect to a public accessible AWS RDS

I was running a serverless web application on a lambda inside a VPC, and connecting to a Aurora-MySQL RDS instance, with inbound rules to allow traffic from the security group of the lambda The ...
1
vote
2answers
71 views

How to retrieve login credentials of an instance that was created from a snapshot?

Configuration: AWS Lightsail (Wordpress) Background Issue: I lost the SSH key pair of an instance Steps Taken: I created a snapshot of the instance I created a New instance from the snapshot ...
0
votes
2answers
159 views

AWS VPC CIDR range and subnet allocation best practices

In my previous job, I was told that when creating a VPC we should always attempt to fill its CIDR as best as possible within its subnets. So a /16 VPC with three public three private subnets, I got ...
0
votes
0answers
25 views

How to securely connect two VPC without using Connection Peering

Suppose some services are running on EC2 instances on VPC A and other services are running on on-premise hardware or even other Cloud Computing environments, say Cluster B equipped with the public IP. ...
0
votes
1answer
118 views

Connect to active directory over peered VPC

I have a VPC(VPC1) where my main instances are running, and I have another one (VPC2)specifically for directory service (AD Connector) and a MS AD server running. I have created a VPC peering (which ...
1
vote
1answer
58 views

Amazon ec2 or Google cloud separate billing

I gave got a software which is installed on multiple ubuntu/ec2 machines. I need the same setup for multiple clients. Each client should only be given option to pay the bill, scale the ec2 ...
0
votes
1answer
53 views

How to make AWS resolves domain name to internal IP

I have a VPC peering established with MongoDB Atlas, however when I try to resolve the database cluster's domain from within an EC2 instance in the same VPC, I get back the public IP. This is a ...
0
votes
0answers
41 views

AWS EC2 public IP unreachable over IPSec VPN but private IP still reachable

We have a FortiGate (FortiOS 6.0) connected to a IPSec Site-to-Site VPN (Dynamic BGP) on AWS. When the VPN is up, we can only access EC2 using the private IP, public IP no longer works. Only the ...
0
votes
2answers
33 views

Criteria for Determining How Many AWS VPCs to Use for Apps? Inter-VPC vs. Intra-VPC Traffic

I can't seem to find any specific guidance on what constitutes good practice with regards to the use of one VPC vs. many for application hosting. This link touches on the subject, but is quite old and ...
0
votes
2answers
88 views

SSH deny rule is allowing me to SSH?

I am learning AWS VPC where I am assigning NACL Inbound/Outbound Rules as below: Right now i am doing for All IPs Rule # Type Allow/Deny 100 All Traffic Allow 200 SSH ...
0
votes
2answers
72 views

How to resolve multiple EC2 instances for SSH in AWS?

I have multiple EC2 instances running in the same VPC (and thus same region). Is there a way that I can resolve those EC2 instances uniquely for SSH access? Let's assume that I am not using elastic ...
2
votes
1answer
166 views

Security Considerations of AWS Private Subnet vs Private Security Group

AWS Virtual Private Cloud allows several ways of restricting access to devices on the VPC network from the Internet. 1) Place devices into a private subnet (no Internet Gateway). Each device can ...
0
votes
1answer
223 views

AWS Security Group not allowing access from private IP for EC2 instances

I have to EC2 instances. They're both in the same VPC, and they both have public IPs assigned to them. My problem is that I'm required to use the public IPs in my Security Groups to allow them to ...
0
votes
1answer
555 views

Not able to access RDS instance inside EKS cluster | EKS <-> RDS connection

I'm trying to access my existing RDS instance in the newly created EKS cluster. steps I have followed: Create a VPC peering connection by keeping RDS as requester and EKS as accepter. Add destination ...
1
vote
1answer
29 views

Timeout connecting to port in EC2 instance, probably ACL issue but can't figure it out

I'm having a lot of trouble connecting to an application running on my newly created EC2 instance from its public IP address. I'm able to log into the server via rdp, however. Once there, I can ...
0
votes
1answer
303 views

attackers bypass aws waf to go for ec2 instances directly

My Setup I have Elastic Beanstalk application, with a public LoadBalancer and public IPs on EC2. The application is behind CloudFront, which is protected with AWS WAF from different attacks I am ...
0
votes
0answers
27 views

What's the most efficient way to capture vpc mirror traffic for a large set of devices?

I want to mirror north/south network traffic for assets within my aws vpc to a packet sniffing security appliance in the same vpc using Amazon's traffic mirroring feature. I've got it to work with a ...
0
votes
1answer
45 views

AWS (EC2 and RDS) Cross Region Performance Issue

I have the RDS server at Japan and two EC2 instances, one in the EU and the second in Japan. I am running one application on the Japan EC2 instance which connects to the RDS (Japan). In this ...
2
votes
1answer
101 views

Aws console vpc id does not match aws cli

When I log into my aws console I see the vpc id as "vpc-6856c210" however on my server through the aws cli I see "vpc-82fe07e9" When I try to run a terraform script I get an error if i use 'vpc-...
0
votes
2answers
81 views

Running multiple applications within single VPC

Is it fine to run multiple applications within single VPC? I might separate them by subnets of course. The reason I'm thinking this way is that the number of VPCs per pegion is limited to 5 (can me ...
0
votes
1answer
62 views

Fastest way to send message from one EC2 instance to another

Another person owns an AWS account, created an EC2 instance on that account, and has given me SSH access to that EC2 instance. I need to send messages frequently (multiple times a second) from that ...
0
votes
2answers
39 views

EBS data security on EC2 instance

A third party created an EC2 instance on their own AWS account, and gave me the private SSH key to log in with. I logged into the EC2 instance, removed .ssh/authorized_keys in the home dir, and ...
0
votes
0answers
39 views

Mocking up a private network to test AWS site-to-site VPN

I have very limit knowledged about VPN so sorry if I use wrong terminology. I am developing a web application solution on AWS for my customer, whereby I should setup my own AWS environment (let's ...
0
votes
0answers
73 views

Internet traffic routing while connected to an AWS VPC private subnet via a Client VPN connection

I've established a VPN connection to a VPC Client VPC. The VPC has only private subnets, and the Client VPN endpoint is associated with one of the private subnets, so there's no Internet access from ...
1
vote
1answer
238 views

AWS Client VPN Access to a Peered VPC

In my AWS infrastructure there are a few VPC. 3 days ago I created Client VPN in VPC1, and successfully configured access to VPC2 according the instruction: https://docs.aws.amazon.com/vpn/latest/...
0
votes
1answer
386 views

ALB can't forward to NLB over VPC Peering Connection

I have an internet-facing ALB in VPC1 and an internal NLB in VPC2 The NLB is pointed at an ECS service and health-checks are healthy The ECS Task Security Group allows traffic from VPC1 CIDR as well ...
0
votes
1answer
140 views

How to migrate database from RDS in one VPC to RDS in another VPC?

I want to migrate the database from one RDS in one VPC to another RDS in separate VPC. This is not migrating the entire RDS but transferring the contents from one RDS to another and both RDS are in ...
1
vote
2answers
191 views

Running AWS Lambda in same VPC as DocumentDB or DynamoDB

We are currently running our AWS Lambda's in a VPC due to an earlier architectural decision. We are also using MongoDB Atlas and a peering connection setup between the VPC and Atlas. This obviously ...
0
votes
0answers
18 views

Accessing Elastic Beanstalk endpoint from AWS Batch (ECS)

I have an Elastic Beanstalk App with a load-balancer on a VPC with a security group which has white-listed inbound IPs. This works great for accessing the provided hostname endpoint (xxx.region....
1
vote
1answer
56 views

unable to create t3 burstable instances with custom VPC

I created a custom VPC with 9 subnets, such that for 3 AZ I have 3 subnets (public, private, and persistence). It has the following configuration: VPC 10.100.0.0/16 Subnets - 10.100.0.0/24 (az1) ...
0
votes
1answer
128 views

How can you change the DNS server used in VPC?

I made a mistake in my configuration and set up my VPC to 10.0.0.0/16 and that conflicts with some of the services run in docker which created an internal network which now has a few containers at 10....
1
vote
1answer
42 views

Is there a way to open a VPC to a domain name?

I have an application running on Elastic Beanstalk that is currently closed to general traffic. I want to open it to the stripe.com billing service. I can see how to do this by opening the VPC to ...
0
votes
1answer
57 views

AWS best method to ssh between servers in private subnet

Is it just normal Linux user creation at this point? I have my NAT and Bastion set up to login with SSH forwarding: ssh -A ec2-user@bastionhost ssh ec2-user@privateSubnetServer What's the best ...
1
vote
1answer
65 views

What's the difference between setting AWS Load Balancer to VPC internal and setting equivalent inbound rules?

I'm setting up an API endpoint that I only want to be accessible from other applications inside my VPC. The app is on Elastic Beanstalk and it appears that I can either set my Load Balancer to ...
1
vote
0answers
33 views

Unable to do immutable managed update in single instance environment in elastic beanstalk

I am unable to successfully execute immutable managed update in single instance environment. Process always timeouts with this error as shown in events page: Service:AmazonCloudFormation, Message:...
2
votes
1answer
82 views

Setting up RRAS VPN on separate subnet with AWS

Basic Layout: VPC has IP range 10.0.0.0/16 2 EC2s on subnet 10.0.0.0/24 First with RRAS providing IP addresses to VPN clients (range 10.0.4.0/24) Second just a test machine to receive pings Other ...
1
vote
2answers
294 views

AWS EC2: Why can I access FTP from local address only?

I have installed vsftpd on a Ubuntu server on AWS however I can not access it via its Elastic IP. If I ssh to the server, I can then ftp to it using its internal IP, but I can't ftp using its public ...
0
votes
0answers
124 views

MissingAuthenticationTokenException when pulling from ECR to EKS in private VPC

I am setting up an EKS cluster in a private VPC. In order to pull images from ECR I created an Endpoint for the ECR service in my VPC. For testing purposes I pushed a Nginx image to my ECR which has ...

1
2 3 4 5
13