Questions tagged [amazon-vpc]

Amazon Virtual Private Cloud (Amazon VPC) lets you provision a logically isolated section of the Amazon Web Services (AWS) Cloud where you can launch AWS resources in a virtual network that you define

Amazon Virtual Private Cloud (Amazon VPC) lets you provision a logically isolated section of the Amazon Web Services (AWS) Cloud where you can launch AWS resources in a virtual network that you define. For additional information, see:

747 questions
0
votes
1 answer

How to configure VPC and subnet for EC2 Database accessible privately

I have an EC2 Postgres Database (not standard AWS RDS, but based on my own configured AMI) I have a load balancer, auto scaling group with 4 max servers in each AZ (us-west-2) My load balancer is attached with 4 public subnets (each in 1 AZ) My EC2…
0
votes
1 answer

Cannot SSH on My EC2 Instance

My last activity was I accidentically edited permission on my ec2 instace I was trying to add permission 775 on my project's directory called storage command like this sudo chmod -R 775 storage But instead doing this on /var/www/html/ I did this on…
Pablo
  • 255
  • 1
  • 4
  • 11
0
votes
1 answer

Lambda with VPC long cold start

I have few lambda functions that are connecting to Mongo Atlas cluster. Connection between Mongo Atlas and my AWS account is done via VPC Peering. Lambda functions are attached to this VPC. I'm experiencing long cold starts of Lambdas, it's taking…
0
votes
2 answers

How AWS Elastic Network Interfaces actually work?

I have a couple of questions regarding ENIs: Why I can't change auto-assigned private IP address on default ENI? What if I change the IP on eth0 inside the system manually? Will it work, or the interface will be ruined? My goal is to understand…
0
votes
0 answers

EC2 outbound static IP

I'm having troubles with an EC2 server I need to connect with an external SQL server that has whitelisted an elastic IP attached to the instance. All the security rules and routes are set in the most permissive way. However, the outbounding traffic…
0
votes
1 answer

AWS VPC peering response traffic - can return address CIDRs overlap?

The AWS documentation on peering refers to the situation where VPCs B and C each have a subnet with an identical CIDR and which are both peered with VPC A, as per the diagram below: The documentation does not make it clear to me whether it is…
John
  • 263
  • 1
  • 2
  • 11
0
votes
1 answer

Is it necessary to create two-way route for transit gateway on AWS?

For multiple aws accounts, we want to make network communicable from A to B. Use transit gateway can allow 2 different vpcs access each other. If want to access from A to B only, in account A, made a route to account B, is it also necessary to…
Miantian
  • 137
  • 1
  • 7
0
votes
0 answers

Kubernetes pod, allow HTTP access just from VPN

Okay, maybe I'm not searching correctly since I didn't found the answer, so help me please. So, I have an EKS cluster (kubernetes cluster provided by AWS), and I have some web applications running there. These applications are exposed to the…
0
votes
2 answers

AWS route 53 inbound resolver endpoints vs using .2 address in a VPC

I am looking to resolve addresses in a private hosted zone network using customised forwarding rules configured in an on-prem DNS service. The forwarding rule would effectively say, "for my private domain xyz, forward queries to 10.1.1.2" where…
shonky linux user
  • 1,163
  • 10
  • 15
0
votes
1 answer

pfSense OpenVPN on AWS VPC

We are in the process of migrating our office servers to AWS to finally decommission. Since we are familiar with pfSense, we are using a mix of AWS services but want to use pfSense as a the OpenVPC server. Our VPC has two subnets: Public:…
pgb
  • 455
  • 1
  • 6
  • 18
0
votes
1 answer

Connecting to Second Elastic IP Address assigned to an ENI on AWS EC2 instance

I have a single ENI connected to a t2.micro EC2 instance. It has an Elastic IP xxx.xxx.xxx.xxx associated with the "primary private IP address". I added a "secondary private IP Address" to the ENI and associated it with another Elastic IP…
Siju George
  • 155
  • 9
0
votes
1 answer

AWS routing between AZs

There's three subnets: subnet A on AZ-A, 10.0.1.0/24 subnet B on AZ-B, 10.0.2.0/24 subnet C on AZ-C, 10.0.3.0/24 There's one server on subnet A (10.0.1.50) answering to ping performed via Site-to-Site VPN. Is it somehow possible to route pings to…
0
votes
1 answer

No outbound access to internet from Windows Server 2019 on VPC

On AWS, I have a NAT instance (Linux) and a Webserver (Windows 2019) on a VPC. The web server works as it should, I can also RDP to the webserver via the nat, no issues. The problem is that there's no outbound access to the internet from the…
can.do
  • 101
  • 2
0
votes
0 answers

Connected OpenVPN Client to AWS VPC but can't access internet

So I followed this tutorial: https://docs.aws.amazon.com/vpn/latest/clientvpn-admin/cvpn-getting-started.html And I was able to set up a client VPN endpoint, I am able to see the connection as "active" in the console when I activate OpenVPN on my…
Amon
  • 101
  • 4
0
votes
1 answer

AWS Elasticache security groups for inter cluster communication

I don't really have a setup to test this, but if I create an elasticache redis cluster with more than 1 node, how exactly would a security group have to look like to be very secure but without breaking the cluster itself? Lets say I create a…