Questions tagged [amazon-vpc]

Amazon Virtual Private Cloud (Amazon VPC) lets you provision a logically isolated section of the Amazon Web Services (AWS) Cloud where you can launch AWS resources in a virtual network that you define

Filter by
Sorted by
Tagged with
0 votes
1 answer
301 views

"AWS CIDR is not within the CIDR ranges of VPC", but it is?

many questions on this, but this time doesn't seem as obvious as the others. I'm trying to split a VPC in two subnets. I start with VPC 10.0.0.0/24, 254+1 IPs, from 10.0.0.1 to 10.0.0.255 I create the ...
gabriel's user avatar
  • 103
0 votes
0 answers
47 views

Apache/AWS: How to identify local instance requests from the same VPC

In this configuration the apache server instances are all in the same VPC (across several subnets) and all incoming requests are managed via an elastic load balancer, (with ProxyProtocol=On on each ...
Konchog's user avatar
  • 101
1 vote
1 answer
870 views

What is causing BadRequestException when calling the ExecuteStatement operation on Aurora Serverless db

I have a lambda function that retrieves records from AWS Aurora Serverless db. Now I thought of adding api gateway to trigger the lambda function but I get this error Connect an AWS Lambda function ...
sji gshan's user avatar
1 vote
0 answers
486 views

On AWS how can the ENI of my squid proxy become a blackhole in my route table if the EC2 instance still exists?

Been googling like crazy and can't find an answer. We have three AZs/subnets since we're in Ohio. But this diagram is close enough to explain the issue. We've set up squid proxies to filter outbound ...
Taylor's user avatar
  • 111
1 vote
1 answer
352 views

DNS policy for VPC endpoint

I have VPC with three subnets in different availability zones, and an interface VPC endpoint in each. The VPC endpoint has 4 DNS hostnames by default: A regional DNS hostname, e.g. vpce-x.ec2.us-east-...
Ralf's user avatar
  • 179
0 votes
0 answers
43 views

unable route traffic

unable to ping from one instance to another instance (Different AWS account) through VPC peering** As a part of learning I have created VPC peering between two different AWS account similar region 1....
Rajops369's user avatar
1 vote
2 answers
777 views

Restricting traffic between AWS VPCs

I have two VPCs: A and B. I want any node in A to be able to open a TCP connection to any node in B, but not the other way around. Any node in B must also be able to open outgoing connections to ...
Ralf's user avatar
  • 179
0 votes
0 answers
30 views

Web application not serving with Route53 under wifi?

I have a node application running in an Ec2 container on port 443. I've added an Elastic IP to the container. When I reference the Elastic IP or IPv4 DNS in the browser, I can see my application. I ...
Scott's user avatar
  • 101
0 votes
1 answer
794 views

Using the AWS VPC CNI add on for EKS can I access a pod directly via it's vpc ip address over a vpn?

My general question is in the title. I feel like I've misunderstood the way pods are connected to the VPC. I was assuming this would make pods routable on the vpc but it seems like this is not the ...
ClintM's user avatar
  • 103
1 vote
1 answer
904 views

Will aws s3 be still accessible using pre-signed urls if we create a vpc endpoint gateway?

I have a need to add a vpc endpoint for s3 so i can access it on lambda, but when i try to create the endpoint I get a warning Warning When you use an endpoint, the source IP addresses from your ...
code0x00's user avatar
  • 109
0 votes
2 answers
2k views

Selecting subnets for a Service in Fargate

As we can see in the picture above, I can select as many subnets as I want. Does it mean, the tasks in the service are created across these two subnets? Suppose I have one task running, in which ...
MrRobot9's user avatar
  • 123
0 votes
1 answer
124 views

EC2 Instance connection to an RDS instance accessible only via VPN

I have a Laravel application (API) that I am trying to move to AWS, however, the DB sits privately in AWS and is only accessible to me through a VPN. The database is an RDS instance. How can I provide ...
chewie's user avatar
  • 105
0 votes
2 answers
683 views

Can the IPv4 CIDRs of the VPC and subnets within be different? (Or they should be within that range)?

Say for example I have set 172.31.0.0/16 for the VPC, can I have 172.31.1.0/24 for a subnet within this VPC?
Caterina's user avatar
  • 123
0 votes
0 answers
294 views

AWS DNS alias for VPC local resources

I'd like to be able to provide a resource SRV that lives in two different VPCs. So I'd give them DNS names srv.vpc1.corp.com and srv.vpc2.corp.com. What I'm trying to figure out is if I can provision ...
Mark Robinson's user avatar
0 votes
1 answer
1k views

restoring a DB snapshot to a different zone

I'd like to restore a snapshot from a DB instance in one region to a DB instance in another region. I can copy the DB identifier but in the Connectivity section I only have two options for "...
neubert's user avatar
  • 337
0 votes
1 answer
183 views

Aws Private Network Port Forwarding

I have 2 subnets, one private and one public. I need to renew the certificate by using letsencrypt on the private subnet. I’m able to do this by creating an instance in public and routing (dns, ...
James001's user avatar
0 votes
1 answer
211 views

How to set a public LB route to a proxy on AWS?

I built this traffic route in a VPC. Route53->ACM(SSL)->Public ALB->EC2(Nginx proxy)->Private ALB->ECS(Internal App) The EC2's security group is allowing tcp 80 and 443. The ECS' ...
uotn's user avatar
  • 17
1 vote
0 answers
168 views

AWS VPC CIDRs in both 10.0.0.0/8 and 192.168.0.0/16

I have VPC A with CIDR 10.A.0.0/16 and VPC B with CIDR 10.B.0.0/16. I have VPC A and B peered and updated the route tables and from a server in 10.B.0.0/16 can ping a server in 10.A.0.0/16 and vice ...
Gangstead's user avatar
  • 111
1 vote
1 answer
563 views

AWS Network Firewall - How to log the blocked connections

Question Is there a way to log the connections blocked by the AWS Network Firewall, or filter the logs of blocked connections? Background Currently having setup the rules, and would like to know which ...
mon's user avatar
  • 265
0 votes
1 answer
61 views

How to configure VPC and subnet for EC2 Database accessible privately

I have an EC2 Postgres Database (not standard AWS RDS, but based on my own configured AMI) I have a load balancer, auto scaling group with 4 max servers in each AZ (us-west-2) My load balancer is ...
Nirav Bhatt's user avatar
1 vote
1 answer
1k views

AWS - Can a Private Subnet reach the Internet only with NAT without Internet Gateway

Question It is possible to access the Internet from a private subnet only with NAT without an Internet Gateway associate with its VPC? Background VPC with public and private subnets (NAT) says below. ...
mon's user avatar
  • 265
0 votes
1 answer
470 views

Cannot SSH on My EC2 Instance

My last activity was I accidentically edited permission on my ec2 instace I was trying to add permission 775 on my project's directory called storage command like this sudo chmod -R 775 storage But ...
Pablo's user avatar
  • 265
1 vote
2 answers
452 views

AWS VPC Internet Gateway traffic direction

I know how to connect to an EC2 instance by following https://aws.amazon.com/premiumsupport/knowledge-center/vpc-connect-instance/ I want to ask is there any traffic direction concept in AWS VPC ...
user avatar
0 votes
1 answer
547 views

Lambda with VPC long cold start

I have few lambda functions that are connecting to Mongo Atlas cluster. Connection between Mongo Atlas and my AWS account is done via VPC Peering. Lambda functions are attached to this VPC. I'm ...
krzysiexp's user avatar
0 votes
2 answers
689 views

How AWS Elastic Network Interfaces actually work?

I have a couple of questions regarding ENIs: Why I can't change auto-assigned private IP address on default ENI? What if I change the IP on eth0 inside the system manually? Will it work, or the ...
Konstantin 's user avatar
0 votes
0 answers
86 views

EC2 outbound static IP

I'm having troubles with an EC2 server I need to connect with an external SQL server that has whitelisted an elastic IP attached to the instance. All the security rules and routes are set in the most ...
sandalija's user avatar
0 votes
1 answer
164 views

AWS VPC peering response traffic - can return address CIDRs overlap?

The AWS documentation on peering refers to the situation where VPCs B and C each have a subnet with an identical CIDR and which are both peered with VPC A, as per the diagram below: The documentation ...
John's user avatar
  • 293
1 vote
1 answer
2k views

How to Apply Egress rules to Default Security Group - AWS

I would like to apply port 443 outbound rule to the 'Default' security group. It worked by creating a dedicated block OutboundRule (which is commented out). Instead of creating a new block, I want to ...
Prime's user avatar
  • 143
-1 votes
1 answer
752 views

How to diagnose cross account EC2/RDS connection with vpc flow logs in AWS?

In AWS, made 2 accounts. account 1: A | Deployed EC2 account 2: B | Deployed RDS Want to connect from account 1's EC2 to account 2's RDS, but doesn't work. So enabled VPC flow logs to diagnose where ...
Miantian's user avatar
  • 137
0 votes
1 answer
439 views

Is it necessary to create two-way route for transit gateway on AWS?

For multiple aws accounts, we want to make network communicable from A to B. Use transit gateway can allow 2 different vpcs access each other. If want to access from A to B only, in account A, made a ...
Miantian's user avatar
  • 137
2 votes
1 answer
441 views

How do I determine what AWS assets are in a given VPC? And if they are all in a VPC, is there any reason to use in-transit encryption between them?

This seems like an exceptionally dumb question, but as my high school woodshop teacher said, the only dumb question is the one that doesn't get asked. I'm not entirely sure what assets are in a given ...
hbquikcomjamesl's user avatar
0 votes
0 answers
512 views

Kubernetes pod, allow HTTP access just from VPN

Okay, maybe I'm not searching correctly since I didn't found the answer, so help me please. So, I have an EKS cluster (kubernetes cluster provided by AWS), and I have some web applications running ...
David Nithael Torres Lima's user avatar
0 votes
2 answers
2k views

AWS route 53 inbound resolver endpoints vs using .2 address in a VPC

I am looking to resolve addresses in a private hosted zone network using customised forwarding rules configured in an on-prem DNS service. The forwarding rule would effectively say, "for my ...
shonky linux user's user avatar
1 vote
0 answers
48 views

Connecting to Client Data Centre using AWS VPN

I have been using AWS for the past 3 years. We have never required to connect to our client data centre using a VPN until recently. I am entirely new to the concept of VPN, however, I have figured a ...
Somnath Guthula's user avatar
2 votes
1 answer
79 views

Hands-on experience configuring a virtual network [closed]

I want to understand the details of how a VPC or virtual overlay network is setup. I'll personally learn it best if I get some hands-on experience doing it. I was wondering if I can rent a few ...
user855's user avatar
  • 121
1 vote
1 answer
624 views

Does the Amazon Route 53 Resolver only work with AmazonProvidedDNS?

I want to configure the Amazon Route 53 Resolver to forward queries for a subdomain to an on-prem DNS server in a on-prem network connected to my vpc via a VPN. But I already have a dhcp scope ...
red888's user avatar
  • 4,243
2 votes
0 answers
62 views

aws Private IPv4 DNS records not resolvable after changing dhcp scope

I created a dchp scope for my VPC to point to my own windows dns servers This works as expected, linux and windows instances are automatically configured to use the IPs of my windows dns servers BUT ...
red888's user avatar
  • 4,243
7 votes
1 answer
5k views

AWS - VPC creation date

Could you possibly let me know how I can check when the VPC has been created? Or how to check in cloudtrail who created vpc via cli? I've tried to use cloudtrail and search in event name for CreateVpc ...
netmat's user avatar
  • 89
1 vote
0 answers
258 views

Network latency & Performance for inter subnet traffic in a AZ

My current local DC deployment has 2 subnets inside a datacenter where data is injected to the instances on a subnet A and then the instance is migrated to subnet B to serve traffic We need to migrate ...
S Kr's user avatar
  • 111
0 votes
1 answer
767 views

pfSense OpenVPN on AWS VPC

We are in the process of migrating our office servers to AWS to finally decommission. Since we are familiar with pfSense, we are using a mix of AWS services but want to use pfSense as a the OpenVPC ...
pgb's user avatar
  • 455
0 votes
1 answer
926 views

Connecting to Second Elastic IP Address assigned to an ENI on AWS EC2 instance

I have a single ENI connected to a t2.micro EC2 instance. It has an Elastic IP xxx.xxx.xxx.xxx associated with the "primary private IP address". I added a "secondary private IP Address&...
Siju George's user avatar
1 vote
1 answer
555 views

AWS routing "lost" packets intended to a network behind VPN

I have an EC2 instance that connects to a VPN and another instance in the same VPC that emmits traffic to that VPN So the topology is something like this: The instance at 172.1.0.1 can connect to the ...
JuanXarg's user avatar
  • 123
2 votes
2 answers
949 views

Forbid communication between two ec2 instances within one private VPC

We have two ec2 instances within one private VPC group. Is there a way to forbid communication between ec2 servers?
Gleb's user avatar
  • 23
1 vote
2 answers
220 views

Prevent data exfiltration in AWS via HTTP and FTP

I have a series of AWS accounts that are under one organizational entity. I want to prevent other users in my accounts from copying or sending data to an account that is not in my organization via ...
Jackson's user avatar
  • 113
0 votes
1 answer
131 views

AWS routing between AZs

There's three subnets: subnet A on AZ-A, 10.0.1.0/24 subnet B on AZ-B, 10.0.2.0/24 subnet C on AZ-C, 10.0.3.0/24 There's one server on subnet A (10.0.1.50) answering to ping performed via Site-to-...
lingo's user avatar
  • 101
2 votes
1 answer
228 views

Why would you want worker node traffic to leave a VPC? (AWS EKS)

When setting up AWS EKS, I came across a configuration option I don't understand. What is the use case for the "public" option as shown in this screenshot? This is the only option that makes ...
Savvly's user avatar
  • 23
1 vote
0 answers
150 views

How to access a private ELB URL in AWS Lambda

I have an ELB that is pointing HTTPS (443) - https://dummyendpint.com. This is in Private VPC and exposed to only whitelisted IP addresses. Now I am working on this endpoint (https://dummyendpint.com) ...
Prabhu Vignesh Rajagopal's user avatar
0 votes
1 answer
729 views

No outbound access to internet from Windows Server 2019 on VPC

On AWS, I have a NAT instance (Linux) and a Webserver (Windows 2019) on a VPC. The web server works as it should, I can also RDP to the webserver via the nat, no issues. The problem is that there's no ...
can.do's user avatar
  • 101
1 vote
0 answers
162 views

Setting up multiple routes to the same destination network in AWS VPC

We're in the process of moving a legacy application to AWS. This applicaton depends in a VPN set up by a third party, which provide us with two GRE/IPsec tunnels in active/standby mode, on top of ...
sitarraco's user avatar
0 votes
0 answers
1k views

Connected OpenVPN Client to AWS VPC but can't access internet

So I followed this tutorial: https://docs.aws.amazon.com/vpn/latest/clientvpn-admin/cvpn-getting-started.html And I was able to set up a client VPN endpoint, I am able to see the connection as "...
Amon's user avatar
  • 101

1
2
3 4 5
16