Questions tagged [amazon-vpc]

Amazon Virtual Private Cloud (Amazon VPC) lets you provision a logically isolated section of the Amazon Web Services (AWS) Cloud where you can launch AWS resources in a virtual network that you define

Filter by
Sorted by
Tagged with
0 votes
0 answers
9 views

AWS VPC Connect Endpoint and Workbrench integration

I have some RDS instances under a private subnet and a bastion host (ec2 instance) with a public IP to connect to it. As part of getting a security certification we need to get rid of all ec2 ...
Andrés Páez's user avatar
0 votes
0 answers
56 views

Prioritize S2S VPN on AWS when using 1 VGW

We have the following AWS setup: 1 VPC 1 Virtual Private Gateway (VGW) 8 Customer Gateways (CGWs) 8 Site-to-Site (S2S) VPN connections We have 4 sites, each connected to our VPC with 2 S2S VPN ...
J88's user avatar
  • 101
0 votes
0 answers
48 views

Allow AWS Identity provider to access a private VPC where the OIDC Idp resides

We want to implement Gitlab-AWS short-lived credentials but our Gitlab instance is located inside a private, non internet accessible VPC Subnet. I have looked into VPC Endpoints but I cannot find the ...
Michael Angel P.'s user avatar
0 votes
1 answer
87 views

how to block outgoing traffic in ec2 without blocking ssh

I have an EC2 with has public subnet and traffic is flowing through internet gateway. Now, i have an requirement like I have to block all outgoing traffic in EC2. I have tried to restrict the traffic ...
Ravi Teja RVN's user avatar
0 votes
1 answer
74 views

Spoke VPC over VPN to IGW

Is it possible to modify this solution so a spoke VPC connects to the TGW hub over VPN, and that spoke VPC's internet access is centralized full tunnel? https://aws.amazon.com/blogs/networking-and-...
aaaaaaaaaaa's user avatar
0 votes
1 answer
67 views

How to create a VPC endpoint to access SQL DB hosted inside EC2 instance?

I have a lambda in VPC-1 trying to access a SQL database which is hosted inside an EC2 instance in VPC-2. How should I establish a connection between Lambda(VPC-1) and SQL DB (VPC-2) using VPC ...
Anuj Kadam's user avatar
0 votes
0 answers
29 views

How to specify Security Group when creating VPC in AWS web console UI

I created a security group and then wanted to create a VPC and specify this VPC to use this existing security group. I couldn't find an option in AWS' current VPC form to specify the security group. ...
AJP's user avatar
  • 153
0 votes
2 answers
99 views

AWS CIDR Address is not within CIDR Address from VPC

In AWS have created VPC which CIDR is 10.0.0.24.I want to creates its two subnet.its public-subnet is in us-west-1a - IPv4 CIDR 10.0.0.0/24 thenwhen I create private subnet is in us-west-1b - ...
Developer.Sumit's user avatar
0 votes
0 answers
206 views

How to remove headers from all outgoing requests in AWS services (e.g. Lambda)

Just wondering, is there a way to remove a header from all outgoing network requests in AWS? I have a VPC with public and private subnets and a NAT gateway in the public subnet. A Lambda in this VPC ...
nerdlinger's user avatar
0 votes
2 answers
156 views

Unable to access apache2 from outside

I'm hosting a default site for apache2 server on AWS EC2 (Ubuntu) with Elastic IP. Security group set to open all inbound (testing purposed). I can access the server via SSH using public IP but I can'...
Artur Kedzior's user avatar
0 votes
0 answers
104 views

AWS - I want to route traffic from one VPC to another, but I want all traffic INTO that VPC to share an IP

Due to a very complicated situation that I can't really get into, we have a VPC that has access to a certain server via a direct connection. This server requires that we whitelist an IP to access it. ...
Whitewind617's user avatar
0 votes
0 answers
11 views

Cloudformation For SG

need to create SG for mutiple VPCs using cloudformation with out hard coding vpc ids in SG below is example with hard coded vpc but is there way u can get VPC id from mapping or anyother logic ...
Noor's user avatar
  • 1
0 votes
0 answers
75 views

Can we setup VPC for AWS Lightsail resources?

I am developing an app and to host backend system I am using AWS Lightsail. Is there a way to keep all the inter service communication private? I am aware this can be achieved with VPC while using AWS ...
Kuldeep Yadav's user avatar
0 votes
0 answers
106 views

How to discover what service is hitting NAT Gateway having only a bunch of IPs as clue?

The usage of NAT Gateway skyrocketed since last week. I was tasked to find the root cause of this since the AWS bill is considerably high now. My first action was to ask people. No one is aware about ...
Keoma Borges's user avatar
0 votes
1 answer
123 views

VPC endpoint to reach Beanstalk application associated with a public domain from within VPC

I have a web server running on Beanstalk that is associated with mydomain.org on Route53. The access to this web server is restricted by a security group. I have also a Lambda running in the same VPC, ...
revy's user avatar
  • 101
0 votes
0 answers
111 views

Multi-region internal, domain resolved static website hosted in S3

Statement I do have a website that has a single page application hosted in S3, and a web service hosted in AWS Lambda. To avoid cross-site requests, both share the same domain, and I route the ...
Luís Guilherme's user avatar
0 votes
1 answer
1k views

Why shouldn't EC2 instances be public, if they can be protected with security groups?

It is considered bad practice to place machines that shouldn't be accessible from the internet in a public subnet, because such topology, other than being logically wrong (private instance in an ...
F. Alessandro's user avatar
0 votes
0 answers
217 views

Why can't I mount this efs

I have used this CDK setup (https://github.com/doctorray117/minecraft-ondemand) to build an AWS based minecraft bedrock server. All i need to do is be able to transfer the existing world files to this ...
Tofuwarrior's user avatar
0 votes
0 answers
86 views

AWS AppStream is unable to push session script logs to s3

I have configured session scripts to log stdout and stderr to s3 bucket as described in https://docs.aws.amazon.com/appstream2/latest/developerguide/use-session-scripts.html#enable-S3-bucket-storage-...
MPP's user avatar
  • 1
1 vote
0 answers
262 views

Elastic Beanstalk deploy app in private VPC without public ip address for EC2

I'm currently developing a NodeJS application that I want to deploy in Elastic Beanstalk (EBS). To isolate & secure my cloud resources I'm using VPCs where I deploy the EBS app and also my ...
Marc Becker's user avatar
2 votes
2 answers
265 views

Why is my Google Cloud Function timing out when making a HTTP request to my AWS Fargate instance?

I am working on a Google cloud function for beforeSignIn trigger which needs to fetch some data from a microservice hosted on a AWS Fargate instance. The request times out but only in the Google cloud ...
alsuvo's user avatar
  • 31
0 votes
1 answer
86 views

AWS: routing back from VPC to an instance

I'm relatively new to AWS and need to set up some internal infrastructure. Example: a VPN server that routes people into a VPC. I have a VPN server instance bound to an elastic IP that has a subnet ...
Yuri's user avatar
  • 3
0 votes
1 answer
95 views

AWS cannot connect to any T3 instance, vpc config valid (I think)

I created a new VPC ca-central. I followed the same procedure as everywhere else: New VPC (this created acl which is wide open) three subnets, one for each availabiltiy zone, CIDR spaced out properly ...
mmix's user avatar
  • 141
0 votes
0 answers
129 views

Setting up HA NAT instances on AWS

Question: Anyone have experience running HA NAT instances and how to set them up? Basically, I would need to have my own NAT instances with automatic failover in case something breaks. I've ran years ...
eof's user avatar
  • 141
0 votes
0 answers
55 views

AWS EC2: adding IP from a separate private block

I have an existing VPC with a CIDR in the 10.0.0.0/16 block. I now have to create a VPN connection to an external service, who want us to use IPs in 192.168.0.0/16 block. Unfortunately, AWS does not ...
NullPointer's user avatar
0 votes
0 answers
20 views

No response from EC2 AmazonProvidedDNS server over Site-toSite VPN

I have a VPC using the network 10.10.1.0/24, and a Site-to-Site VPN connection to my local subnet (192.168.1.0/24). The VPN uses addresses in the 10.11.254.0/24 range. When I connect to the VPN, I can ...
Cpt.Whale's user avatar
  • 412
0 votes
1 answer
274 views

OpenVPN on AWS (works in NAT mode but doesn't work in Routing mode)

I have a brand new VPC (10.0.0.0/16) with 3 public subnets (pointing to an IGW) and 3 private subnets (with a NAT GW in each). I have deployed an OpenVPN appliance in the public subnet and configured ...
mreferre's user avatar
  • 476
0 votes
0 answers
182 views

AWS: Ping between multiple namespaces in seperated EC2 Instance

I am encountering an issue where I am unable to receive a response when attempting to ping from a namespace located within a public EC2 instance to a private one. To better illustrate my situation, I ...
Tanvir Rahman's user avatar
0 votes
0 answers
141 views

How to configure shared VPC for kOps?

As described in this documentation, I want to create a Kubernetes cluster using kOps in an existing VPC. I have created a VPC, Internet Gateway, Route Table, Subnet and an EC2 instance which I want to ...
Tapas Bose's user avatar
0 votes
0 answers
1k views

How to create EKS cluster with VPC CNI addon via CloudFormation?

I create a EKS cluster (1.24) via cloudformation, it works fine without a CNI plugin but fails when I add vpc-cni addon: AddonCNI: Type: 'AWS::EKS::Addon' Properties: AddonName: vpc-...
chingis's user avatar
  • 243
0 votes
1 answer
489 views

Seamless switch from NAT GATEWAY to VPC gateway

My team is currently burdened by the NAT Gateway costs and we would like to switch over to VPC Gateway endpoint to reduce the costs associated with all the EC2-S3 communication. at the same time, We ...
santhu's user avatar
  • 1
-1 votes
1 answer
80 views

Can I connect two vpc's with one site to site vpn in same region?

I currently have one site to site vpn connected to one vpc. I want to add a vpc here(It's the same region), but I want to connect the on-premise network connected through site to site vpn through site ...
john_smith's user avatar
1 vote
0 answers
168 views

which ECS task network mode?

I have an Application Load Balancer in a private subnet (used by API Gateway) that targets an ECS task. I want that task to only be accessible from inside the VPC, not from the internet, but I do have ...
Max's user avatar
  • 11
2 votes
2 answers
2k views

AWS security group cross regions

I am trying to set a security group A to allow SSH access from security group B in a different region. I don't have much experience with networking in general and AWS networking. Followed the ...
Elad Weiss's user avatar
1 vote
1 answer
5k views

Why does an S3 to S3 copy care about VPCs? Related to error: "VPC endpoints do not support cross-region requests."

Goal: Get files from Bucket 1 in ca-central-1 in Account A to Bucket 2 in us-east-1 in Account B using the AWS CLI from a third machine using an the IAM role with correct S3 read and write ...
Ben Ogorek's user avatar
1 vote
0 answers
174 views

Linux instance vs Windows instance - different behaviour in an AWS private subnet routing traffic through a NAT

I'm experimenting with a NAT gateway vs a Squid proxy in an EC2 instance (both of these placed in the same public subnet). To test connectivity, I'm using a private subnet to access the internet (once ...
Chaos's user avatar
  • 121
0 votes
0 answers
1k views

Can't ping or traceroute through EC2 using AWS Site-to-Site VPN to Cisco ASA

My VPC is connected to Cisco ASA, tunnel is shown to be UP in the AWS console. What is working: The engineer on the Cisco side has successfully pinged my EC2 instance within my private 10.5.0.0/17 ...
MarkK's user avatar
  • 101
1 vote
1 answer
148 views

Is it necessary to put public and private subnet in different vpc for extra safety

Currently we put public accessible resources like ALB inside public subnet, application servers and data storages inside private subnet (different data storage, say RDS and Elasticache, have their own ...
nevets's user avatar
  • 111
0 votes
1 answer
94 views

Move an Elastic IP from a VPC to Classic EC2

I know it is possible to "Move to VPC Scope", but is it also possible to move back from VPC to Classic EC2?
Mark Hansen's user avatar
0 votes
1 answer
494 views

Creating Subnet IP address : IPv4 block sizes must be between a /16 netmask and /28 netmask

I'm new to AWS and I'm looking to create a subnet. Whenever I try the defaults subnets under I get either the error message "IPv4 block sizes must be between a /16 netmask and /28 netmask." ...
Christian Fuh's user avatar
1 vote
1 answer
1k views

AWS PrivateLink connection with HTTPS

I have two VPCs, a consumer VPC and a service VPC. Consumer application HAS to access the service via AWS PrivateLink and it HAS to be an HTTPS call. Here is my current setup, which works: Note that ...
itstrueimryan's user avatar
0 votes
0 answers
76 views

AWS: Classic RDS to VPC resulted in high CPU

We are running a single 5.7 MySQL Database for couple of years using Amazon AWS RDS service. 3 days ago we moved our server from a Classic RDS into a VPC (no other action was done). The load on our ...
Miko Meltzer's user avatar
0 votes
1 answer
305 views

NAT Gateway breaks incoming traffic for instances in public subnet

I have Elastic Beanstalk instances accessible through an ALB in public subnets and want to assign them a single IP address (A partner asked us for an IP to whitelist to access their services) I have ...
BlackDog's user avatar
  • 121
0 votes
1 answer
251 views

How do I deploy a docker container on AWS Elastic Beanstalk privately such that only other AWS resources can access it?

Need to make an AWS deployment decision. A lot of this tech (docker, beanstalk) is pretty new so I don't know best practices (and I'm also foggier than I'd like to be on networking and security). Tech ...
Paranoid Altoid's user avatar
1 vote
1 answer
932 views

Fargate task from service with Public IP disabled can't download env file from S3

We have a Fargate service that should be exposed to the internet via a load balancer, and since for tests we had used so far the random Public IP of the task, we decided to disable the Public IP, so ...
Ncifra's user avatar
  • 111
0 votes
1 answer
241 views

How to specify AWS region in CloudFormation VPC

Reading through the AWS CloudFormation VPC docs, I'm not seeing how/where I specify the region to create the VPC in. Any ideas as to how this configuration works?
hotmeatballsoup's user avatar
0 votes
1 answer
581 views

AWS VPC Peering vs PrivateLink for network access to 3rd party cloud database

AWS here. I have a simple app server that is running on EC2 instances that are in an autoscaling ("target") group that are fronted by an application load balancer (ALB). The ALB's domain ...
hotmeatballsoup's user avatar
1 vote
0 answers
471 views

Elastic BeanStalk can't connect to ElastiCache Redis

I'm having issues connecting from Elastic BeanStalk to ElastiCache Redis. When I SSH into the EBS instance and try to use redis-cli to connect, it times out. This is how I set up my environment: I ...
Teotimo Garcia's user avatar
0 votes
0 answers
136 views

VPC connection between LDAP server onsite and LDAP client in Amazon

I currently have a VPC connection between LDAP server onsite and LDAP client in Amazon. However, after some time the connection starts to fail. I can notice that, since this appears for my user (even ...
kcpf's user avatar
  • 11
0 votes
1 answer
31 views

disassociate EIP and then convert to vps eip

I have an eip that I want to convert from scope EC2-classic to VPC. Can I disassociate, convert to VPC eip, and then just re-associate with the same ec2 instance? I'm not sure if I will be able to ...
thevoipman's user avatar

1
2 3 4 5
16