Questions tagged [aws-networking]
37 questions
3
votes
3 answers
EC2 instance can't access amazon-linux repos (eg amazon-linux-extras install docker) through s3 gateway endpoint
I'm having s3 endpoint grief. When my instances initialize they can not install docker. Details:
I have ASG instances sitting in a VPC with pub and private subnets. Appropriate routing and EIP/NAT is all stitched up.Instances in private subnets have…

GorginZ
- 121
- 1
- 8
2
votes
2 answers
Is it possible to share Parameter Store keys in another AWS Account for same region?
The use case: The database credentials are stored in Parameter Store for an AWS source Account and we need to share such credentials with other AWS Account.
I know the recommendation is to use System Manager, but that is not a valid option for…

Richard Lee
- 2,136
- 2
- 25
- 33
2
votes
1 answer
How are security group rules evaluated?
I am currently working my way through the AWS Certified Solutions Architect - Associate (SAA-C02) Linkedin Learning course and I came across something confusing regarding security groups.
During the lecture, the lecturer says that when using…

Zsolt András Patka
- 43
- 6
1
vote
1 answer
VPC Interface Endpoint is accessible from subnets which isn't associated with it
I'm trying to access s3 using interface VPC Endpoint but i have a technical issue which i can’t solve.
I have A VPC with the following Subnet:
Subnet A (Private without Internet)
Subnet B (Private without Internet)
Subnet C (Public with Internet…

ziad hassan
- 28
- 4
1
vote
1 answer
AWS manual static route to loopback interface does not work
There are two instances:
A with IP 172.31.129.238/28
B with IP 172.31.129.232/28 and 10.0.0.200/32
there is a static route in A, saying "10.0.0.200 via 172.31.129.232". B 172.31.129.232 is pingable from A, however 10.0.0.200 is not pingable. I would…

maiky
- 3,503
- 7
- 28
- 28
1
vote
0 answers
Is it possible to Public API Gateway -> VPC Link -> NLB -> Private API Gateway?
I have a VPC with multiple private API Gateways. This is so services within the VPC can call other private APIs without leaving VPC.
I have a Public API Gateway that I want my clients to engage with, but I want this Public API Gateway to have it's…

Matthew Blair
- 21
- 4
1
vote
1 answer
It's possible to use AWS service discovery within a private VPC?
I'm trying to build up a system within a private VPC and I need some containers to communicate between them. Its important to say that for now I'm not using any kind of internet connection, so no NAT gateways, for example, to access others AWS…

Felipe Hogrefe Bento
- 187
- 15
1
vote
0 answers
Communication between tasks in ECS with App Mesh and Cloudmap
My ECS task (that connected to App Mesh with Cloudmap) cannot reach other ECS task (that connected to App Mesh with Cloudmap as well).
dig +short products.services.local return nothing.
curl -v products.services.local:4000/graphql returns
Could not…

Benny67b
- 509
- 1
- 6
- 18
1
vote
1 answer
Error: Unsupported attribute , each.value is object with 2 attributes
i’m trying to create multiple Network interfaces by using for_each and locals, here is my code
locals {
network_interfaces = {
a = {
subnet_id = module.vpc.public_subnets[0],
security_group = [aws_security_group.ssh.id],
…

Hamza AZIZ
- 2,582
- 1
- 9
- 18
1
vote
1 answer
AWS Task Definition warning when enabled "Auto-configure CloudWatch Logs"
when I enable Auto-configure CloudWatch Logs a warning about Network mode appears, it says Your containers in the task will share an ENI using a common network stack. Port mappings can only specify container ports (any existing host port…

LuisEnMarroquin
- 1,609
- 1
- 14
- 26
1
vote
2 answers
Exposing a ECS Service to the net
I have created a ECS cluster and created a number of services. But I want one of the services be accessed to the outside world. That service will then interact with the other services.
Created an ECS cluster
Created services.
Created the apps…

Anton Cavanaugh
- 719
- 1
- 4
- 14
1
vote
1 answer
How to build an IAM authenticated VPC gateway on AWS?
I'm trying to expose an HTTP server to the internet. The server runs on a Fargate container inside a dedicated VPC. I could just expose it through a public Application Load Balancer (ALB) if it wasn't for the fact that requests to this server must…

barmanthewise
- 359
- 4
- 10
1
vote
2 answers
Move AWS account to another AWS Organization
I have an AWS Landing Zone setup with Networking, Logging, Security, and a number of Custom AWS accounts. All of the ingress/egress connectivity is going through the Networking account.
I want to set up a completely new Landing Zone (AWS…

jumpy
- 317
- 1
- 12
0
votes
1 answer
EC2 instance dhcp options when ip is statically set on ENI
I am just going through dhcp option sets and its mentioned that domain name and name-server are assigned through dhcp options. Now when i set the ip address statically during instance creation, then the ENI wont be running any dhcp. Now as i am…

adnan
- 15
- 4
0
votes
0 answers
Unable to Access EC2 Instance in AWS Environment via Intermediate Account with VPC Peering
Description:
I am encountering difficulties accessing the Nexus server, which is hosted in the "prod" AWS account behind an internal ALB, from a Jenkins agent located in the "staging" AWS account. Both the "prod" and "staging" accounts have…

Mujahed Altahleh
- 21
- 3