1

My architecture is the following:

  1. Web app that a user can connect via the internet and that connects to an API that retrieves the data for the application;
  2. API that receives the request from the web app, retrieves the data from the database and sends it back to the web app.

I'm running both of them in AWS app runner but with all the configurations set to public, but this is not ideal since my API should be kept from the internet and accessed only by the web app.

What I tried to do is set the API with a VPC connector in the outgoing network and a VPC endpoint as incoming:

API configurations

It, indeed, is not accessible via the internet, but it works from inside the VPC (I'm able to connect to it using my VPN).

For the web app, I set the incoming as public (so I can access it via the internet) and the outgoing as a VPC connector (the same as the API one):

Web app configuration

But this doesn't work. I can connect to the web app, but it cannot connect to the API. What's more confusing to me is that when I set the incoming for the web app to be a VPC endpoint, I could access it from inside the VPC using the VPN, and it could connect to the API without problems.

Does anyone know what I'm doing wrong?

Bruno Mello
  • 4,448
  • 1
  • 9
  • 39
  • Hi, generally speaking hard to debug networking from away, but checkout the following: `Sample Leaderboard Application section` in https://aws.amazon.com/blogs/containers/deep-dive-on-aws-app-runner-private-services/ – Sándor Bakos Jan 29 '23 at 09:57

0 Answers0