Questions tagged [amazon-vpc]

Amazon Virtual Private Cloud (Amazon VPC) lets you provision a logically isolated section of the Amazon Web Services (AWS) Cloud where you can launch AWS resources in a virtual network that you define

Amazon Virtual Private Cloud (Amazon VPC) lets you provision a logically isolated section of the Amazon Web Services (AWS) Cloud where you can launch AWS resources in a virtual network that you define. For additional information, see:

747 questions
0
votes
0 answers

AWS: Ping between multiple namespaces in seperated EC2 Instance

I am encountering an issue where I am unable to receive a response when attempting to ping from a namespace located within a public EC2 instance to a private one. To better illustrate my situation, I have included a diagram below. Update: Private…
0
votes
0 answers

How to configure shared VPC for kOps?

As described in this documentation, I want to create a Kubernetes cluster using kOps in an existing VPC. I have created a VPC, Internet Gateway, Route Table, Subnet and an EC2 instance which I want to use for invoking the kops create cluster command…
Tapas Bose
  • 101
  • 3
0
votes
0 answers

How to create EKS cluster with VPC CNI addon via CloudFormation?

I create a EKS cluster (1.24) via cloudformation, it works fine without a CNI plugin but fails when I add vpc-cni addon: AddonCNI: Type: 'AWS::EKS::Addon' Properties: AddonName: vpc-cni AddonVersion: v1.12.0-eksbuild.1 …
0
votes
1 answer

Seamless switch from NAT GATEWAY to VPC gateway

My team is currently burdened by the NAT Gateway costs and we would like to switch over to VPC Gateway endpoint to reduce the costs associated with all the EC2-S3 communication. at the same time, We would like to keep NAT gateway for any other…
0
votes
0 answers

VPC network interfaces - hot, warm and cold attach

According to Best practices for configuring network interfaces guide, there are three ways to attach a network interface to an instance: You can attach a network interface to an instance when: it's running (hot attach), when it's stopped (warm…
Marek Grzenkowicz
  • 464
  • 1
  • 9
  • 14
0
votes
0 answers

Configure AWS VPN with security rules for internal load balancer

currently we have an AWS client vpn setup to give users access to our VPC. We are using active directory groups to allow certain users access to ip ranges. However, we would like to allow some users to only access an internal load balancer we have…
0
votes
1 answer

Why does an S3 to S3 copy care about VPCs? Related to error: "VPC endpoints do not support cross-region requests."

Goal: Get files from Bucket 1 in ca-central-1 in Account A to Bucket 2 in us-east-1 in Account B using the AWS CLI from a third machine using an the IAM role with correct S3 read and write permissions (assume unless that's unlikely) I got the…
0
votes
0 answers

Can't ping or traceroute through EC2 using AWS Site-to-Site VPN to Cisco ASA

My VPC is connected to Cisco ASA, tunnel is shown to be UP in the AWS console. What is working: The engineer on the Cisco side has successfully pinged my EC2 instance within my private 10.5.0.0/17 subnet range. Cisco side SLA is working and…
0
votes
1 answer

Move an Elastic IP from a VPC to Classic EC2

I know it is possible to "Move to VPC Scope", but is it also possible to move back from VPC to Classic EC2?
0
votes
1 answer

Creating Subnet IP address : IPv4 block sizes must be between a /16 netmask and /28 netmask

I'm new to AWS and I'm looking to create a subnet. Whenever I try the defaults subnets under I get either the error message "IPv4 block sizes must be between a /16 netmask and /28 netmask." or "CIDR Address is not within CIDR Address from VPC."enter…
0
votes
0 answers

AWS: Classic RDS to VPC resulted in high CPU

We are running a single 5.7 MySQL Database for couple of years using Amazon AWS RDS service. 3 days ago we moved our server from a Classic RDS into a VPC (no other action was done). The load on our system is constant and mild, but since the move, we…
0
votes
1 answer

NAT Gateway breaks incoming traffic for instances in public subnet

I have Elastic Beanstalk instances accessible through an ALB in public subnets and want to assign them a single IP address (A partner asked us for an IP to whitelist to access their services) I have followed…
0
votes
1 answer

How do I deploy a docker container on AWS Elastic Beanstalk privately such that only other AWS resources can access it?

Need to make an AWS deployment decision. A lot of this tech (docker, beanstalk) is pretty new so I don't know best practices (and I'm also foggier than I'd like to be on networking and security). Tech details: I have a docker application from a…
0
votes
1 answer

How to specify AWS region in CloudFormation VPC

Reading through the AWS CloudFormation VPC docs, I'm not seeing how/where I specify the region to create the VPC in. Any ideas as to how this configuration works?
0
votes
1 answer

AWS VPC Peering vs PrivateLink for network access to 3rd party cloud database

AWS here. I have a simple app server that is running on EC2 instances that are in an autoscaling ("target") group that are fronted by an application load balancer (ALB). The ALB's domain name is CNAME-mapped in DNS to my dev subdomain, say,…