Questions tagged [amazon-vpc]
Amazon Virtual Private Cloud (Amazon VPC) lets you provision a logically isolated section of the Amazon Web Services (AWS) Cloud where you can launch AWS resources in a virtual network that you define
755
questions
0
votes
1
answer
301
views
"AWS CIDR is not within the CIDR ranges of VPC", but it is?
many questions on this, but this time doesn't seem as obvious as the others.
I'm trying to split a VPC in two subnets.
I start with VPC 10.0.0.0/24, 254+1 IPs, from 10.0.0.1 to 10.0.0.255
I create the ...
0
votes
0
answers
47
views
Apache/AWS: How to identify local instance requests from the same VPC
In this configuration the apache server instances are all in the same VPC (across several subnets) and all incoming requests are managed via an elastic load balancer, (with ProxyProtocol=On on each ...
1
vote
1
answer
870
views
What is causing BadRequestException when calling the ExecuteStatement operation on Aurora Serverless db
I have a lambda function that retrieves records from AWS Aurora Serverless db. Now I thought of adding api gateway to trigger the lambda function but I get this error
Connect an AWS Lambda function ...
1
vote
0
answers
486
views
On AWS how can the ENI of my squid proxy become a blackhole in my route table if the EC2 instance still exists?
Been googling like crazy and can't find an answer. We have three AZs/subnets since we're in Ohio. But this diagram is close enough to explain the issue.
We've set up squid proxies to filter outbound ...
1
vote
1
answer
352
views
DNS policy for VPC endpoint
I have VPC with three subnets in different availability zones, and an interface VPC endpoint in each. The VPC endpoint has 4 DNS hostnames by default:
A regional DNS hostname, e.g. vpce-x.ec2.us-east-...
0
votes
0
answers
43
views
unable route traffic
unable to ping from one instance to another instance (Different AWS account) through VPC peering**
As a part of learning I have created VPC peering between two different AWS account similar region
1....
1
vote
2
answers
777
views
Restricting traffic between AWS VPCs
I have two VPCs: A and B.
I want any node in A to be able to open a TCP connection to any node in B, but not the other way around. Any node in B must also be able to open outgoing connections to ...
0
votes
0
answers
30
views
Web application not serving with Route53 under wifi?
I have a node application running in an Ec2 container on port 443. I've added an Elastic IP to the container. When I reference the Elastic IP or IPv4 DNS in the browser, I can see my application. I ...
0
votes
1
answer
794
views
Using the AWS VPC CNI add on for EKS can I access a pod directly via it's vpc ip address over a vpn?
My general question is in the title. I feel like I've misunderstood the way pods are connected to the VPC. I was assuming this would make pods routable on the vpc but it seems like this is not the ...
1
vote
1
answer
904
views
Will aws s3 be still accessible using pre-signed urls if we create a vpc endpoint gateway?
I have a need to add a vpc endpoint for s3 so i can access it on lambda, but when i try to create the endpoint I get a warning
Warning
When you use an endpoint, the source IP addresses from your ...
0
votes
2
answers
2k
views
Selecting subnets for a Service in Fargate
As we can see in the picture above, I can select as many subnets as I want. Does it mean, the tasks in the service are created across these two subnets?
Suppose I have one task running, in which ...
0
votes
1
answer
124
views
EC2 Instance connection to an RDS instance accessible only via VPN
I have a Laravel application (API) that I am trying to move to AWS, however, the DB sits privately in AWS and is only accessible to me through a VPN.
The database is an RDS instance.
How can I provide ...
0
votes
2
answers
683
views
Can the IPv4 CIDRs of the VPC and subnets within be different? (Or they should be within that range)?
Say for example I have set 172.31.0.0/16 for the VPC, can I have 172.31.1.0/24 for a subnet within this VPC?
0
votes
0
answers
294
views
AWS DNS alias for VPC local resources
I'd like to be able to provide a resource SRV that lives in two different VPCs. So I'd give them DNS names srv.vpc1.corp.com and srv.vpc2.corp.com.
What I'm trying to figure out is if I can provision ...
0
votes
1
answer
1k
views
restoring a DB snapshot to a different zone
I'd like to restore a snapshot from a DB instance in one region to a DB instance in another region.
I can copy the DB identifier but in the Connectivity section I only have two options for "...
0
votes
1
answer
183
views
Aws Private Network Port Forwarding
I have 2 subnets, one private and one public. I need to renew the certificate by using letsencrypt on the private subnet. I’m able to do this by creating an instance in public and routing (dns, ...
0
votes
1
answer
211
views
How to set a public LB route to a proxy on AWS?
I built this traffic route in a VPC.
Route53->ACM(SSL)->Public ALB->EC2(Nginx proxy)->Private ALB->ECS(Internal App)
The EC2's security group is allowing tcp 80 and 443. The ECS' ...
1
vote
0
answers
168
views
AWS VPC CIDRs in both 10.0.0.0/8 and 192.168.0.0/16
I have VPC A with CIDR 10.A.0.0/16 and VPC B with CIDR 10.B.0.0/16. I have VPC A and B peered and updated the route tables and from a server in 10.B.0.0/16 can ping a server in 10.A.0.0/16 and vice ...
1
vote
1
answer
563
views
AWS Network Firewall - How to log the blocked connections
Question
Is there a way to log the connections blocked by the AWS Network Firewall, or filter the logs of blocked connections?
Background
Currently having setup the rules, and would like to know which ...
0
votes
1
answer
61
views
How to configure VPC and subnet for EC2 Database accessible privately
I have an EC2 Postgres Database (not standard AWS RDS, but based on my own configured AMI)
I have a load balancer, auto scaling group with 4 max servers in each AZ (us-west-2)
My load balancer is ...
1
vote
1
answer
1k
views
AWS - Can a Private Subnet reach the Internet only with NAT without Internet Gateway
Question
It is possible to access the Internet from a private subnet only with NAT without an Internet Gateway associate with its VPC?
Background
VPC with public and private subnets (NAT) says below. ...
0
votes
1
answer
470
views
Cannot SSH on My EC2 Instance
My last activity was I accidentically edited permission on my ec2 instace
I was trying to add permission 775 on my project's directory called storage
command like this
sudo chmod -R 775 storage
But ...
1
vote
2
answers
452
views
AWS VPC Internet Gateway traffic direction
I know how to connect to an EC2 instance by following https://aws.amazon.com/premiumsupport/knowledge-center/vpc-connect-instance/
I want to ask is there any traffic direction concept in AWS VPC ...
0
votes
1
answer
547
views
Lambda with VPC long cold start
I have few lambda functions that are connecting to Mongo Atlas cluster. Connection between Mongo Atlas and my AWS account is done via VPC Peering. Lambda functions are attached to this VPC.
I'm ...
0
votes
2
answers
689
views
How AWS Elastic Network Interfaces actually work?
I have a couple of questions regarding ENIs:
Why I can't change auto-assigned private IP address on default ENI?
What if I change the IP on eth0 inside the system manually? Will it work, or the ...
0
votes
0
answers
86
views
EC2 outbound static IP
I'm having troubles with an EC2 server
I need to connect with an external SQL server that has whitelisted an elastic IP attached to the instance. All the security rules and routes are set in the most ...
0
votes
1
answer
164
views
AWS VPC peering response traffic - can return address CIDRs overlap?
The AWS documentation on peering refers to the situation where VPCs B and C each have a subnet with an identical CIDR and which are both peered with VPC A, as per the diagram below:
The documentation ...
1
vote
1
answer
2k
views
How to Apply Egress rules to Default Security Group - AWS
I would like to apply port 443 outbound rule to the 'Default' security group. It worked by creating a dedicated block OutboundRule (which is commented out). Instead of creating a new block, I want to ...
-1
votes
1
answer
752
views
How to diagnose cross account EC2/RDS connection with vpc flow logs in AWS?
In AWS, made 2 accounts.
account 1: A | Deployed EC2
account 2: B | Deployed RDS
Want to connect from account 1's EC2 to account 2's RDS, but doesn't work. So enabled VPC flow logs to diagnose where ...
0
votes
1
answer
439
views
Is it necessary to create two-way route for transit gateway on AWS?
For multiple aws accounts, we want to make network communicable from A to B.
Use transit gateway can allow 2 different vpcs access each other.
If want to access from A to B only, in account A, made a ...
2
votes
1
answer
441
views
How do I determine what AWS assets are in a given VPC? And if they are all in a VPC, is there any reason to use in-transit encryption between them?
This seems like an exceptionally dumb question, but as my high school woodshop teacher said, the only dumb question is the one that doesn't get asked.
I'm not entirely sure what assets are in a given ...
0
votes
0
answers
512
views
Kubernetes pod, allow HTTP access just from VPN
Okay, maybe I'm not searching correctly since I didn't found the answer, so help me please.
So, I have an EKS cluster (kubernetes cluster provided by AWS), and I have some web applications running ...
0
votes
2
answers
2k
views
AWS route 53 inbound resolver endpoints vs using .2 address in a VPC
I am looking to resolve addresses in a private hosted zone network using customised forwarding rules configured in an on-prem DNS service. The forwarding rule would effectively say, "for my ...
1
vote
0
answers
48
views
Connecting to Client Data Centre using AWS VPN
I have been using AWS for the past 3 years. We have never required to connect to our client data centre using a VPN until recently. I am entirely new to the concept of VPN, however, I have figured a ...
2
votes
1
answer
79
views
Hands-on experience configuring a virtual network [closed]
I want to understand the details of how a VPC or virtual overlay network is setup. I'll personally learn it best if I get some hands-on experience doing it.
I was wondering if I can rent a few ...
1
vote
1
answer
624
views
Does the Amazon Route 53 Resolver only work with AmazonProvidedDNS?
I want to configure the Amazon Route 53 Resolver to forward queries for a subdomain to an on-prem DNS server in a on-prem network connected to my vpc via a VPN.
But I already have a dhcp scope ...
2
votes
0
answers
62
views
aws Private IPv4 DNS records not resolvable after changing dhcp scope
I created a dchp scope for my VPC to point to my own windows dns servers
This works as expected, linux and windows instances are automatically configured to use the IPs of my windows dns servers
BUT ...
7
votes
1
answer
5k
views
AWS - VPC creation date
Could you possibly let me know how I can check when the VPC has been created? Or how to check in cloudtrail who created vpc via cli?
I've tried to use cloudtrail and search in event name for CreateVpc ...
1
vote
0
answers
258
views
Network latency & Performance for inter subnet traffic in a AZ
My current local DC deployment has 2 subnets inside a datacenter where data is injected to the instances on a subnet A and then the instance is migrated to subnet B to serve traffic
We need to migrate ...
0
votes
1
answer
767
views
pfSense OpenVPN on AWS VPC
We are in the process of migrating our office servers to AWS to finally decommission. Since we are familiar with pfSense, we are using a mix of AWS services but want to use pfSense as a the OpenVPC ...
0
votes
1
answer
926
views
Connecting to Second Elastic IP Address assigned to an ENI on AWS EC2 instance
I have a single ENI connected to a t2.micro EC2 instance.
It has an Elastic IP xxx.xxx.xxx.xxx associated with the "primary private IP address".
I added a "secondary private IP Address&...
1
vote
1
answer
555
views
AWS routing "lost" packets intended to a network behind VPN
I have an EC2 instance that connects to a VPN and another instance in the same VPC that emmits traffic to that VPN
So the topology is something like this:
The instance at 172.1.0.1 can connect to the ...
2
votes
2
answers
949
views
Forbid communication between two ec2 instances within one private VPC
We have two ec2 instances within one private VPC group. Is there a way to forbid communication between ec2 servers?
1
vote
2
answers
220
views
Prevent data exfiltration in AWS via HTTP and FTP
I have a series of AWS accounts that are under one organizational entity. I want to prevent other users in my accounts from copying or sending data to an account that is not in my organization via ...
0
votes
1
answer
131
views
AWS routing between AZs
There's three subnets:
subnet A on AZ-A, 10.0.1.0/24
subnet B on AZ-B, 10.0.2.0/24
subnet C on AZ-C, 10.0.3.0/24
There's one server on subnet A (10.0.1.50) answering to ping performed via Site-to-...
2
votes
1
answer
228
views
Why would you want worker node traffic to leave a VPC? (AWS EKS)
When setting up AWS EKS, I came across a configuration option I don't understand.
What is the use case for the "public" option as shown in this screenshot?
This is the only option that makes ...
1
vote
0
answers
150
views
How to access a private ELB URL in AWS Lambda
I have an ELB that is pointing HTTPS (443) - https://dummyendpint.com. This is in Private VPC and exposed to only whitelisted IP addresses.
Now I am working on this endpoint (https://dummyendpint.com) ...
0
votes
1
answer
729
views
No outbound access to internet from Windows Server 2019 on VPC
On AWS, I have a NAT instance (Linux) and a Webserver (Windows 2019) on a VPC. The web server works as it should, I can also RDP to the webserver via the nat, no issues. The problem is that there's no ...
1
vote
0
answers
162
views
Setting up multiple routes to the same destination network in AWS VPC
We're in the process of moving a legacy application to AWS. This applicaton depends in a VPN set up by a third party, which provide us with two GRE/IPsec tunnels in active/standby mode, on top of ...
0
votes
0
answers
1k
views
Connected OpenVPN Client to AWS VPC but can't access internet
So I followed this tutorial: https://docs.aws.amazon.com/vpn/latest/clientvpn-admin/cvpn-getting-started.html
And I was able to set up a client VPN endpoint, I am able to see the connection as "...