Last call to make your voice heard! Our 2022 Developer Survey closes in less than a week. Take survey.

Questions tagged [amazon-vpc]

Amazon Virtual Private Cloud (Amazon VPC) lets you provision a logically isolated section of the Amazon Web Services (AWS) Cloud where you can launch AWS resources in a virtual network that you define

Filter by
Sorted by
Tagged with
0 votes
1 answer
13 views

disassociate EIP and then convert to vps eip

I have an eip that I want to convert from scope EC2-classic to VPC. Can I disassociate, convert to VPC eip, and then just re-associate with the same ec2 instance? I'm not sure if I will be able to ...
user avatar
0 votes
1 answer
18 views

AWS Postgres database IP in security group, how to enter info to survive IP address changes?

I have an existing prod Postgres database and I would like to replicate a table to a new Postgres database. In order to get the two to be able to talk to each other, I had to edit an AWS security ...
user avatar
  • 121
0 votes
0 answers
13 views

AWS EKS - EIA attached on node not reachable by Pod

I'm using a standard AWS EKS cluster, all cloud based (K8S 1.21) with multiple node groups, one of which uses a Launch Template that defines an Elastic Inference Accelerator attached to the instances (...
user avatar
0 votes
0 answers
14 views

Waiting for the initial commucation packet: 10060 - postgres RDS

I am trying to setup a environment in AWS where there are subnets (public and private ) in a VPC . The public subnet hosts a web application and the private subnet host my RDS - postgres. i have ...
user avatar
0 votes
1 answer
36 views

"AWS CIDR is not within the CIDR ranges of VPC", but it is?

many questions on this, but this time doesn't seem as obvious as the others. I'm trying to split a VPC in two subnets. I start with VPC 10.0.0.0/24, 254+1 IPs, from 10.0.0.1 to 10.0.0.255 I create the ...
user avatar
0 votes
0 answers
17 views

Apache/AWS: How to identify local instance requests from the same VPC

In this configuration the apache server instances are all in the same VPC (across several subnets) and all incoming requests are managed via an elastic load balancer, (with ProxyProtocol=On on each ...
user avatar
  • 101
1 vote
1 answer
114 views

What is causing BadRequestException when calling the ExecuteStatement operation on Aurora Serverless db

I have a lambda function that retrieves records from AWS Aurora Serverless db. Now I thought of adding api gateway to trigger the lambda function but I get this error Connect an AWS Lambda function ...
user avatar
0 votes
0 answers
63 views

On AWS how can the ENI of my squid proxy become a blackhole in my route table if the EC2 instance still exists?

Been googling like crazy and can't find an answer. We have three AZs/subnets since we're in Ohio. But this diagram is close enough to explain the issue. We've set up squid proxies to filter outbound ...
user avatar
  • 101
1 vote
1 answer
44 views

DNS policy for VPC endpoint

I have VPC with three subnets in different availability zones, and an interface VPC endpoint in each. The VPC endpoint has 4 DNS hostnames by default: A regional DNS hostname, e.g. vpce-x.ec2.us-east-...
user avatar
  • 169
0 votes
0 answers
31 views

unable route traffic

unable to ping from one instance to another instance (Different AWS account) through VPC peering** As a part of learning I have created VPC peering between two different AWS account similar region 1....
user avatar
1 vote
2 answers
77 views

Restricting traffic between AWS VPCs

I have two VPCs: A and B. I want any node in A to be able to open a TCP connection to any node in B, but not the other way around. Any node in B must also be able to open outgoing connections to ...
user avatar
  • 169
0 votes
0 answers
21 views

Web application not serving with Route53 under wifi?

I have a node application running in an Ec2 container on port 443. I've added an Elastic IP to the container. When I reference the Elastic IP or IPv4 DNS in the browser, I can see my application. I ...
user avatar
  • 101
0 votes
1 answer
237 views

Using the AWS VPC CNI add on for EKS can I access a pod directly via it's vpc ip address over a vpn?

My general question is in the title. I feel like I've misunderstood the way pods are connected to the VPC. I was assuming this would make pods routable on the vpc but it seems like this is not the ...
user avatar
  • 103
1 vote
1 answer
225 views

Will aws s3 be still accessible using pre-signed urls if we create a vpc endpoint gateway?

I have a need to add a vpc endpoint for s3 so i can access it on lambda, but when i try to create the endpoint I get a warning Warning When you use an endpoint, the source IP addresses from your ...
user avatar
  • 109
0 votes
2 answers
209 views

Selecting subnets for a Service in Fargate

As we can see in the picture above, I can select as many subnets as I want. Does it mean, the tasks in the service are created across these two subnets? Suppose I have one task running, in which ...
user avatar
  • 123
0 votes
1 answer
28 views

EC2 Instance connection to an RDS instance accessible only via VPN

I have a Laravel application (API) that I am trying to move to AWS, however, the DB sits privately in AWS and is only accessible to me through a VPN. The database is an RDS instance. How can I provide ...
user avatar
  • 105
0 votes
2 answers
44 views

Can the IPv4 CIDRs of the VPC and subnets within be different? (Or they should be within that range)?

Say for example I have set 172.31.0.0/16 for the VPC, can I have 172.31.1.0/24 for a subnet within this VPC?
user avatar
  • 123
0 votes
0 answers
218 views

AWS DNS alias for VPC local resources

I'd like to be able to provide a resource SRV that lives in two different VPCs. So I'd give them DNS names srv.vpc1.corp.com and srv.vpc2.corp.com. What I'm trying to figure out is if I can provision ...
user avatar
0 votes
1 answer
66 views

restoring a DB snapshot to a different zone

I'd like to restore a snapshot from a DB instance in one region to a DB instance in another region. I can copy the DB identifier but in the Connectivity section I only have two options for "...
user avatar
  • 275
0 votes
1 answer
49 views

Aws Private Network Port Forwarding

I have 2 subnets, one private and one public. I need to renew the certificate by using letsencrypt on the private subnet. I’m able to do this by creating an instance in public and routing (dns, ...
user avatar
0 votes
1 answer
59 views

How to set a public LB route to a proxy on AWS?

I built this traffic route in a VPC. Route53->ACM(SSL)->Public ALB->EC2(Nginx proxy)->Private ALB->ECS(Internal App) The EC2's security group is allowing tcp 80 and 443. The ECS' ...
user avatar
  • 7
0 votes
0 answers
49 views

Will using a private VPC for a MongoDB EC2 reduce latency?

I'm currently using Lambda functions to access an EC2 instance in the same region as the Lambda functions (us-east-1). The EC2 instance is currently accessed via a public domain (e.g, mongodb://...
user avatar
1 vote
0 answers
45 views

AWS VPC CIDRs in both 10.0.0.0/8 and 192.168.0.0/16

I have VPC A with CIDR 10.A.0.0/16 and VPC B with CIDR 10.B.0.0/16. I have VPC A and B peered and updated the route tables and from a server in 10.B.0.0/16 can ping a server in 10.A.0.0/16 and vice ...
user avatar
  • 111
0 votes
0 answers
37 views

am I losing packages in AWS ALB?

I have an application load balancer that is redirecting the traffic by host to the target group Listener HTTP: redirect host -> something#.dns.com -> HTTPS Listener HTTPS: something.dns.com ->...
user avatar
0 votes
0 answers
43 views

SSH works for ec2 Ubuntu 20 Instance. No other Outgoing/Incoming traffic is working

I have an ec2 instance, a postgres database rds instance that share the same vpc. I recently bumped up the capacity of my ec2 instance to xlarge ec2. I setup the server like you normally would with ...
user avatar
0 votes
1 answer
53 views

AWS Network Firewall - How to log the blocked connections

Question Is there a way to log the connections blocked by the AWS Network Firewall, or filter the logs of blocked connections? Background Currently having setup the rules, and would like to know which ...
user avatar
  • 225
0 votes
1 answer
25 views

How to configure VPC and subnet for EC2 Database accessible privately

I have an EC2 Postgres Database (not standard AWS RDS, but based on my own configured AMI) I have a load balancer, auto scaling group with 4 max servers in each AZ (us-west-2) My load balancer is ...
user avatar
1 vote
1 answer
201 views

AWS - Can a Private Subnet reach the Internet only with NAT without Internet Gateway

Question It is possible to access the Internet from a private subnet only with NAT without an Internet Gateway associate with its VPC? Background VPC with public and private subnets (NAT) says below. ...
user avatar
  • 225
0 votes
1 answer
83 views

Cannot SSH on My EC2 Instance

My last activity was I accidentically edited permission on my ec2 instace I was trying to add permission 775 on my project's directory called storage command like this sudo chmod -R 775 storage But ...
user avatar
  • 225
0 votes
0 answers
25 views

How to access AWS Direct Connect virtual private gateway behind PrivateLink NLB?

I need to install a Direct Connect private gateway in account A which provides access to on-premises resources. There are multiple (20+) VPCs in different accounts (B, C, D, ...) which require access ...
user avatar
  • 223
0 votes
2 answers
125 views

AWS VPC Internet Gateway traffic direction

I know how to connect to an EC2 instance by following https://aws.amazon.com/premiumsupport/knowledge-center/vpc-connect-instance/ I want to ask is there any traffic direction concept in AWS VPC ...
user avatar
0 votes
1 answer
154 views

Lambda with VPC long cold start

I have few lambda functions that are connecting to Mongo Atlas cluster. Connection between Mongo Atlas and my AWS account is done via VPC Peering. Lambda functions are attached to this VPC. I'm ...
user avatar
0 votes
2 answers
164 views

How AWS Elastic Network Interfaces actually work?

I have a couple of questions regarding ENIs: Why I can't change auto-assigned private IP address on default ENI? What if I change the IP on eth0 inside the system manually? Will it work, or the ...
user avatar
0 votes
0 answers
45 views

EC2 outbound static IP

I'm having troubles with an EC2 server I need to connect with an external SQL server that has whitelisted an elastic IP attached to the instance. All the security rules and routes are set in the most ...
user avatar
0 votes
1 answer
49 views

AWS VPC peering response traffic - can return address CIDRs overlap?

The AWS documentation on peering refers to the situation where VPCs B and C each have a subnet with an identical CIDR and which are both peered with VPC A, as per the diagram below: The documentation ...
user avatar
  • 223
1 vote
1 answer
549 views

How to Apply Egress rules to Default Security Group - AWS

I would like to apply port 443 outbound rule to the 'Default' security group. It worked by creating a dedicated block OutboundRule (which is commented out). Instead of creating a new block, I want to ...
user avatar
  • 143
-1 votes
1 answer
365 views

How to diagnose cross account EC2/RDS connection with vpc flow logs in AWS?

In AWS, made 2 accounts. account 1: A | Deployed EC2 account 2: B | Deployed RDS Want to connect from account 1's EC2 to account 2's RDS, but doesn't work. So enabled VPC flow logs to diagnose where ...
user avatar
  • 127
0 votes
1 answer
89 views

Is it necessary to create two-way route for transit gateway on AWS?

For multiple aws accounts, we want to make network communicable from A to B. Use transit gateway can allow 2 different vpcs access each other. If want to access from A to B only, in account A, made a ...
user avatar
  • 127
2 votes
1 answer
138 views

How do I determine what AWS assets are in a given VPC? And if they are all in a VPC, is there any reason to use in-transit encryption between them?

This seems like an exceptionally dumb question, but as my high school woodshop teacher said, the only dumb question is the one that doesn't get asked. I'm not entirely sure what assets are in a given ...
user avatar
0 votes
0 answers
112 views

Kubernetes pod, allow HTTP access just from VPN

Okay, maybe I'm not searching correctly since I didn't found the answer, so help me please. So, I have an EKS cluster (kubernetes cluster provided by AWS), and I have some web applications running ...
user avatar
0 votes
1 answer
786 views

AWS route 53 inbound resolver endpoints vs using .2 address in a VPC

I am looking to resolve addresses in a private hosted zone network using customised forwarding rules configured in an on-prem DNS service. The forwarding rule would effectively say, "for my ...
user avatar
1 vote
0 answers
19 views

Connecting to Client Data Centre using AWS VPN

I have been using AWS for the past 3 years. We have never required to connect to our client data centre using a VPN until recently. I am entirely new to the concept of VPN, however, I have figured a ...
user avatar
2 votes
1 answer
73 views

Hands-on experience configuring a virtual network [closed]

I want to understand the details of how a VPC or virtual overlay network is setup. I'll personally learn it best if I get some hands-on experience doing it. I was wondering if I can rent a few ...
user avatar
  • 121
1 vote
1 answer
181 views

Does the Amazon Route 53 Resolver only work with AmazonProvidedDNS?

I want to configure the Amazon Route 53 Resolver to forward queries for a subdomain to an on-prem DNS server in a on-prem network connected to my vpc via a VPN. But I already have a dhcp scope ...
user avatar
  • 3,969
1 vote
0 answers
14 views

aws Private IPv4 DNS records not resolvable after changing dhcp scope

I created a dchp scope for my VPC to point to my own windows dns servers This works as expected, linux and windows instances are automatically configured to use the IPs of my windows dns servers BUT ...
user avatar
  • 3,969
3 votes
0 answers
1k views

AWS - VPC creation date

Could you possibly let me know how I can check when the VPC has been created? Or how to check in cloudtrail who created vpc via cli? I've tried to use cloudtrail and search in event name for CreateVpc ...
user avatar
  • 41
1 vote
0 answers
59 views

Network latency & Performance for inter subnet traffic in a AZ

My current local DC deployment has 2 subnets inside a datacenter where data is injected to the instances on a subnet A and then the instance is migrated to subnet B to serve traffic We need to migrate ...
user avatar
  • 111
0 votes
1 answer
419 views

pfSense OpenVPN on AWS VPC

We are in the process of migrating our office servers to AWS to finally decommission. Since we are familiar with pfSense, we are using a mix of AWS services but want to use pfSense as a the OpenVPC ...
user avatar
  • 445
0 votes
1 answer
180 views

Connecting to Second Elastic IP Address assigned to an ENI on AWS EC2 instance

I have a single ENI connected to a t2.micro EC2 instance. It has an Elastic IP xxx.xxx.xxx.xxx associated with the "primary private IP address". I added a "secondary private IP Address&...
user avatar
1 vote
1 answer
136 views

AWS routing "lost" packets intended to a network behind VPN

I have an EC2 instance that connects to a VPN and another instance in the same VPC that emmits traffic to that VPN So the topology is something like this: The instance at 172.1.0.1 can connect to the ...
user avatar
  • 123

1
2 3 4 5
15