Questions tagged [amazon-vpc]

Amazon Virtual Private Cloud (Amazon VPC) lets you provision a logically isolated section of the Amazon Web Services (AWS) Cloud where you can launch AWS resources in a virtual network that you define

Amazon Virtual Private Cloud (Amazon VPC) lets you provision a logically isolated section of the Amazon Web Services (AWS) Cloud where you can launch AWS resources in a virtual network that you define. For additional information, see:

747 questions
0
votes
0 answers

Cloudformation For SG

need to create SG for mutiple VPCs using cloudformation with out hard coding vpc ids in SG below is example with hard coded vpc but is there way u can get VPC id from mapping or anyother logic MySecurityGroup: Type: AWS::EC2::SecurityGroup …
Noor
  • 1
0
votes
0 answers

Can we setup VPC for AWS Lightsail resources?

I am developing an app and to host backend system I am using AWS Lightsail. Is there a way to keep all the inter service communication private? I am aware this can be achieved with VPC while using AWS outside lightsail. Is there a way to setup…
0
votes
0 answers

How to discover what service is hitting NAT Gateway having only a bunch of IPs as clue?

The usage of NAT Gateway skyrocketed since last week. I was tasked to find the root cause of this since the AWS bill is considerably high now. My first action was to ask people. No one is aware about any deployment that could cause this issue. Then,…
0
votes
1 answer

VPC endpoint to reach Beanstalk application associated with a public domain from within VPC

I have a web server running on Beanstalk that is associated with mydomain.org on Route53. The access to this web server is restricted by a security group. I have also a Lambda running in the same VPC, specifically in a private subnet with NAT…
revy
  • 101
  • 1
0
votes
0 answers

Multi-region internal, domain resolved static website hosted in S3

Statement I do have a website that has a single page application hosted in S3, and a web service hosted in AWS Lambda. To avoid cross-site requests, both share the same domain, and I route the requests on an Application Load Balancer behind a…
0
votes
1 answer

Why shouldn't EC2 instances be public, if they can be protected with security groups?

It is considered bad practice to place machines that shouldn't be accessible from the internet in a public subnet, because such topology, other than being logically wrong (private instance in an internet-facing subnet) also exposes the machines on…
0
votes
0 answers

Why can't I mount this efs

I have used this CDK setup (https://github.com/doctorray117/minecraft-ondemand) to build an AWS based minecraft bedrock server. All i need to do is be able to transfer the existing world files to this new server instance but when I try to mount the…
Tofuwarrior
  • 239
  • 1
  • 3
  • 10
0
votes
0 answers

AWS AppStream is unable to push session script logs to s3

I have configured session scripts to log stdout and stderr to s3 bucket as described in https://docs.aws.amazon.com/appstream2/latest/developerguide/use-session-scripts.html#enable-S3-bucket-storage-session-script-logs &…
0
votes
0 answers

Elastic Beanstalk deploy app in private VPC without public ip address for EC2

I'm currently developing a NodeJS application that I want to deploy in Elastic Beanstalk (EBS). To isolate & secure my cloud resources I'm using VPCs where I deploy the EBS app and also my databases. I'm using an application load balancer to route…
0
votes
1 answer

AWS: routing back from VPC to an instance

I'm relatively new to AWS and need to set up some internal infrastructure. Example: a VPN server that routes people into a VPC. I have a VPN server instance bound to an elastic IP that has a subnet carved out for VPN users. Now how do I tell the VPC…
Yuri
  • 3
  • 1
0
votes
1 answer

AWS cannot connect to any T3 instance, vpc config valid (I think)

I created a new VPC ca-central. I followed the same procedure as everywhere else: New VPC (this created acl which is wide open) three subnets, one for each availabiltiy zone, CIDR spaced out properly all subnets on routing table that routing table…
mmix
  • 141
  • 5
0
votes
0 answers

Setting up HA NAT instances on AWS

Question: Anyone have experience running HA NAT instances and how to set them up? Basically, I would need to have my own NAT instances with automatic failover in case something breaks. I've ran years ago similar setups on-prem, but never on EC2.…
eof
  • 121
  • 3
0
votes
0 answers

AWS EC2: adding IP from a separate private block

I have an existing VPC with a CIDR in the 10.0.0.0/16 block. I now have to create a VPN connection to an external service, who want us to use IPs in 192.168.0.0/16 block. Unfortunately, AWS does not allow mixing these two blocks in a single VPC,…
0
votes
0 answers

No response from EC2 AmazonProvidedDNS server over Site-toSite VPN

I have a VPC using the network 10.10.1.0/24, and a Site-to-Site VPN connection to my local subnet (192.168.1.0/24). The VPN uses addresses in the 10.11.254.0/24 range. When I connect to the VPN, I can access hosts in both the local subnet and the…
Cpt.Whale
  • 307
  • 3
  • 11
0
votes
1 answer

OpenVPN on AWS (works in NAT mode but doesn't work in Routing mode)

I have a brand new VPC (10.0.0.0/16) with 3 public subnets (pointing to an IGW) and 3 private subnets (with a NAT GW in each). I have deployed an OpenVPN appliance in the public subnet and configured it to use NAT mode (Yes, using NAT in the routing…
mreferre
  • 456
  • 2
  • 6