Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
Join us in building a kind, collaborative learning community via our updated Code of Conduct.

Questions tagged [amazon-vpc]

Amazon Virtual Private Cloud (Amazon VPC) lets you provision a logically isolated section of the Amazon Web Services (AWS) Cloud where you can launch AWS resources in a virtual network that you define

0
votes
0answers
6 views

failed to create: [MyElastiCache] when trying to add ElastiCache to Elastic Beanstalk deployment

I'm trying to add ElastiCache to my rails deployment on Elastic Beanstalk. I've followed the instructions, but am getting the following error when trying to deploy: Uploading: [#######################...
0
votes
1answer
34 views

How can you connect two Amazon VPCs through VPC peering if they are already configured with the network IPs?

According to AWS documentation you can connect up to 50 VPC through VPC peering but you have to make sure there's not IP overlapping so my questions here are: How can you come up with so many ...
0
votes
1answer
16 views

Install packages from internet for VPC with no outside access

Have a VPC with a private subnet. Inside the VPC, am looking to update latest Anaconda packages using Conda which involves downloading the latest updates from internet. Since my VPC has no internet ...
0
votes
0answers
17 views

How does creating an S3 endpoint affect other resources using S3?

I've just created a Lambda in AWS that requires access to RDS and, as a result, has to be a VPC Lambda function instead of a regular one. As I understand it, this means I basically have no choice but ...
0
votes
1answer
23 views

Adding ip to connect to RDS 'not Publicly accessible'

I would like to allow access to an RDS for a group of ip's outside the VPC (devs using workbench). However, I would like to leave 'Publicly Accessible' disabled. Is there a way to do this? Config: ...
0
votes
0answers
24 views

Can I use AWS API Gateway for proxying a subset of my base path api's to one vpc and all others to another vpc

I have multiple API's with varying base paths all on the same subdomain. e.g : api.example.com/user/pay api.example/partner/requestpay api.example.com/partner/discount/create api.example.com/...
0
votes
1answer
11 views

Issue connecting EC2 instances in 2 separate VPCs (same region)

I have 2 VPCs (default and special) each hosting 1 EC2 instance. Both instances have the same security group (say name = internal). The security group allows All Traffic from internal (a circular ...
0
votes
0answers
18 views

Connecting to RDS, created by custom VPC, using MySQL Workbench

I need to get an RDS in region X connected by Elastic Beanstalk from regions Y and Z. I have created RDS in a custom VPC. I need to connect to this RDS from my mac using MySQL Workbench. For VPC, ...
0
votes
0answers
23 views

How to access this RDS server in an AWS VPC

I have a typical web application with a web server (PHP) and a database. It is on a new AWS account, not the EC-Classic style. I want to be able to access the database server from my desktop using a ...
0
votes
1answer
16 views

Get the current VPC from CLI within the EC2 instance

How is it possible to display the current VPC from the CLI within a running Linux (Debian) EC2 instance?
0
votes
0answers
45 views

How an Ec2 node can contact eni of a different node in different AWS account and vpc

I have a requirement that one of my EC2 instance's originating traffic to a specific ip address needs to land to a ENI of a different EC2 instance which is present in different account and different ...
-1
votes
2answers
52 views

In AWS VPC subnet id changed

I deleted the default subnet in my VPC and tried to create new. After creating the new subnet it showed a different subnet id, as you would expect. When I try to create subnet group in RDS the ...
0
votes
1answer
21 views

AWS - VPC and subnet group

In order to create RDS, I need to create a VPC and two subnets attached to it. If I choose 10.0.0.0/16 as IPv4 CIDR for VPC, can you please suggest IPv4 CIDR blocks for the two subnets that I have to ...
0
votes
1answer
49 views

Is it possible to share same AWS Elastic IP addresses between two and more VPC?

I have "VPC-A" with NAT and attached Elastic IP address. Couple of services are running inside under load and couldn't be easily moved. Also I have "VPC-B" with own NAT for subnet and, of course, ...
2
votes
1answer
40 views

Public hosted zone records don't work inside VPC

I have some public hosted zone records defined in Route 53. They work normally accessed from any computer, but when accessed from an instance in my production vpc (or any other vpc of my account), it'...
1
vote
0answers
42 views

How do I send logs from a VPC without an internet gateway/VPC endpoint to CloudWatch Logs?

I have a only one VPC which has an internet gateway. We'll call it the main VPC. The other VPCs are connected to the main VPC through a VPC peering connection. There is no public access to those VPCs. ...
1
vote
1answer
43 views

SSH connection between two server after VPC Peering

I am trying to configure SSH connection between two server on two different VPC on my same account. VPC1: vpc-ba8ce8d2 172.31.0.0/16 rtb-576e373f acl-0dbefa65 VPC2: vpc-0c5fc020e4f30283d 10.0.0.0/...
1
vote
2answers
40 views

Connecting to an EC2 instance with custom FW rules

I created a VPC with one Public subnet. Internet gateway was created and attached to the route table associated with Public Subnet. Linux EC2 instance was launched in the public subnet of the VPC ...
1
vote
1answer
28 views

Migrate AWS EIP across VPC

I am creating a new VPC in our AWS account because the local CIDR has to change to support VPC cross region peering. I have public EIP's that I need to migrate over to the new VPC. Is it possible to ...
0
votes
1answer
66 views

Use cases for protected subnets

I'm reading through some blog posts and articles on aws vpc design to see if there are perhaps improvements to be made to a setup currently on aws when I came across an article making mention of "...
1
vote
1answer
193 views

inter-cloud vpn tunneling (AWS and Azure)

I'm trying to establish a VPN site-to-site between a VPC in Amazon Web Services and a VNet in Microsoft Azure. For that I'd like to use AWS' Virtual Private Gateway on one side and Azure's Virtual ...
0
votes
2answers
151 views

Does AWS RDS read replication require peering?

If you create an RDS instance in one region with a read replica in another (in private VPCs, no public access), is it required to peer the private VPCs for replication to occur or does AWS magically ...
0
votes
1answer
254 views

ssh operation timed out on ec2 instance

I am having a problem connecting with my Ubuntu 16.04 ec2 instance on aws. I have added my public key to authorized keys file and also added my ip for ssh access on port 22 using Myip. I am trying ...
2
votes
2answers
395 views

Data transfer speed between AWS regions

Does anyone know what sort of data transfer speed we should be seeing on a VPC peering connection between 2 AWS regions (in this case us-west-2 and eu-west-2)? We tested this a couple of weeks ago, ...
0
votes
1answer
69 views

Security Policy best practice for connecting to an RDS instance in a different VPC

I currently have 2 VPCs set up on the same Amazon account, in the same region. Lets call them vpc-111111 and vpc-222222 for illustration. I have a public RDS server running in vpc-111111 (along with ...
1
vote
0answers
162 views

AWS console - This site cannot be reached - Only on my PC

I have an AWS insatance and whenever I go to the console page, ie: https://us-west-2.console.aws.amazon.com on a browser I get the message: This site can’t be reached us-west-2.console.aws.amazon....
0
votes
1answer
31 views

AWS Rouet 53 Private Hosted Zone route traffic to Ec2 hosted on Private Subnet?

I have below question: I want to host Web Server but want to make sure external (user accessing the web server over internet) DNS resolution should go via organization Data Center. Data Center is ...
1
vote
1answer
201 views

Using boto in an AWS lambda function in a VPC

I have a lambda that accesses EC2. I want to assign it to a VPC for security purposes, but when I do boto just stops working. Here's a minimal example: ec2 = boto3.resource('ec2', region_name='eu-...
0
votes
0answers
72 views

Unable to Resolve Machine Names via Domain Controller

I have two Amazon AWS VPC's connected via a peering connection, where I have enabled DNS resolution between them like so: I am also using an internal domain controller to provide DNS using the AWS ...
1
vote
1answer
95 views

AWS Network ACLs Breaking SSH Connectivity

I'm trying to set up Network ACLs as a second security layer for production instances. It seems that every time I associate a non-default Network ACL to my private subnet it breaks all SSH ...
1
vote
1answer
283 views

route table and subnet association

I have a (non-default) VPC created in my account. It has a default routing table entry. I created an internet gateway and added a route table entry for the outgoing traffic to map to the internet ...
0
votes
0answers
16 views

How to block OpenVPN clients in AWS VPCs to see private subnet of other VPCs

We have 3 AWS VPCs: VPC A for production VPC B for Staging VPC C for Dev There is an OpenVPN Server in VPC C to allow communications from our office to the VPCs. Draw.io VPN Connection between VPCs ...
1
vote
2answers
190 views

Connecting a server in a private subnet from a server in the public subnet

I created 2 subnets in one AWS VPC. One of them has an internet gateway for routing. The other has a NAT gateway. I launched 1 instance into the public subnet with a public IP address and the other ...
1
vote
1answer
1k views

aws private instance cannot resolve hostname (VPC with NAT instance)

Please note that this question is different than this one here where they used a standard AMI vs NAT AMI (in my case). Also in my case private instance can access Internet via ipaddress but not via ...
0
votes
0answers
88 views

connecting multiple lans with openvpns iroute directive

I have multiple AWS VPC network and want to connect in the following configuration using OpenVPN +---------+ +---------+ | vpc1 | | vpc2 | +---------+ +------...
0
votes
0answers
40 views

DNS error when switching to new VPC and subnet

We have one hosted zone in Route 53 to handle the majority of our public domain names. Most of these point to an ELB, all of which are on the same VPC. Recently we decided to do some reorganization ...
-1
votes
1answer
90 views

What are the ways to connect to an ec2 instance in a private subnet? [closed]

I have a VPC with private and public subnets and I want to ssh into one of the machines which is in the private subnets. I have heard of the bastion method but want to try others too, please help me ...
1
vote
1answer
86 views

Is it possible to use an arbitrary address as an AWS VPC route table target?

When I try to add a route in the AWS Console's VPC's route table page, it only shows internet gateways and nat gateways. Is there a way I can use an arbitrary IP address (in the vpc) as a target ...
0
votes
1answer
195 views

Routing on an AWS OpenVPN multi-VPC + ClassicLink

I am having trouble connecting between servers in a multi-region network I’m setting up in AWS, as not all servers are able to be reached from any point in the network. I’m connecting a VPC (A) in ...
0
votes
1answer
49 views

What is the benefit of having two subnets, public and private, in a VPC, vs not having a public IP in a public subnet?

Scenario 2 of the VPC guide on AWS (here) shows how to set up a public and private subnet. To quote: We recommend this scenario if you want to run a public-facing web application, while ...
0
votes
1answer
47 views

AWS: How do I find the list of instances associated with a particular subnet?

AWS now creates a default VPC and default subnet(s) for every instance launched. http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/default-vpc.html You see the list of subnets either through the ...
0
votes
0answers
329 views

AWS VPN: Can't ping customer side with EC2 instance

I have an AWS VPN set up, with the tunnel status "UP". However, I am not able to ping anything on my customer's side, and they are not able to ping my EC2 instance. Customer side has internal IPs ...
3
votes
2answers
300 views

Route traffic between a VPC in one region to a VPC in another region

In order to allow instances in a VPC in Oregon (us-west-2) to contact instances on another VPC in Ireland (eu-west-1), I've installed OpenSwan gateway machines on both regions and established an IPSEC ...
0
votes
0answers
144 views

Network ACL: open Ephemeral ports opens access to all?

I'm setting up a new subnet and following AWS's "Recommended Network ACL Rules for Your VPC": http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Appendix_NACLs.html#...
0
votes
1answer
352 views

AWS: NGinx Reverse Proxy and Security Groups

I have two servers, called NGinxServer and AppServer. NGinxServer is the accessible entry point for all calls to AppServer. For security reasons, I modified the Security Group for AppServer to not ...
1
vote
2answers
562 views

How to get the secondary private IP address of an Amazon EC2 instance

I'm assigning automatically a secondary private IPv4 address during launch of my instances. To configure Ubuntu to recognize this secondary IP I need to run ip addr add 10.0.1.15/24 dev eth0 To ...
0
votes
1answer
178 views

Connecting a VirtualBox fpsense Firewall with an AWS VPC via a secure VPN connection

I would like to connect our office with an Amazon AWS VPC for administering RDS and EC2 instances, which reside inside a non-public subnet. I am pretty new to this, but my idea was to testdrive the ...
4
votes
1answer
939 views

How to connect instances in different AWS accounts by private IP?

Say I have accounts A and B and light sail instances a and b in each account. a and b are in the same region and zone. Is it possiple for a and b to interconnect with private IP? For example, after I ...
1
vote
1answer
261 views

How to manage VPC association to Route53 hosted zone using CloudFormation?

I wrote a CloudFormation template which creates a vpc, subnets, routes, asg's and instances. I want CloudFormation to handle the association of the newly created vpc with an existing Route53 hosted ...
1
vote
1answer
259 views

Network problems when I create Beanstalk environments from an AMI

I'm using AWS elastic beanstalk web interface to create an environment based on an existing AMI that has our application deployed on it. The environment gets created, the app is accessible via the ...