Questions tagged [aws-security-group]

Amazon EC2 Security Groups

Amazon EC2 Security Groups for EC2. A security group acts as a virtual firewall that controls the traffic for one or more instances. When you launch an instance, you associate one or more security groups with the instance.

See Amazon EC2 Security Groups

820 questions
2
votes
1 answer

Security Group settings for using sagemaker notebooks in private subnet

I am new to sagemaker, and am hoping to use sagemaker in a VPC with a private subnet, so data accessed from s3 is not exposed to public internet. I have created a vpc with a private subnet (no internet or nat gateway), and have attached a vpc s3…
2
votes
3 answers

Cannot Connect To AWS Elasticache Redis Cluster From Local Machine

I recently created a Redis cluster on AWS elasticache and am having trouble connecting via redis-cli from my local machine. Every time I run the command: redis-cli -h -p 6379 the connection is never established and eventually…
2
votes
1 answer

Why can't I choose my subnet availability zone in an Azure VNET to ensure high availability?

I have been working with AWS for quite some time and recently started working on Azure for one of the projects. I started from Azure VNET and noticed many differences when it comes to virtual private cloud. I am having hard time finding the answers…
2
votes
2 answers

AWS - Are security groups enough or is there a need for private and public subnets?

Let's suppose I have a web server which is an EC2 instance and an RDS. The EC2 instance communicates with the RDS. For security, I could have this set up behind an Application Load Balancer and use security groups to only allow inbound traffic…
2
votes
2 answers

AWS EKS node to access RDS

I have AWS EKS nodes access RDS where I have have whitelisted EKS node's public IPs in RDS's security group. But this is not viable solution because EKS Nodes can get replaced and its public IP can changes with it. How can I make this EKS node's…
roy
  • 6,344
  • 24
  • 92
  • 174
2
votes
0 answers

Restrict access to VPC with AWS VPN Client using security group

I have set up a VPC with two public and private subnets, I've got an ALB in the public subnet and a service running in the private and being routed to from the ALB. For production my service should be accessible by everyone, which it is, however for…
2
votes
1 answer

Restrict wideopen security group rule access through IAM Policy

Overview: Users will be logging into windows EC2 instance directly from their source ip and the source ip tends to change often. Current State: We have provided IAM users access to modify/create/delete security groups. Need: Users have an option to…
deepanmurugan
  • 1,815
  • 12
  • 18
2
votes
1 answer

Conditional Expression not working in aws_security_group resource egress block terraform

for resource aws_security_group , i want to add egress block to run only if ingress rules are created. Below i have applied condition for the egress block using count then tried with for_each , but I am getting error : An argument named "count" or…
2
votes
2 answers

How to add security group to VPC Endpoint in CDK (AWS)

I have an existing VPC endpoint on my AWS account. When I deploy my CDK stack i need to somehow add a security group to that VPC endpoint for my server to be able to talk to a Redshift cluster on another network. I define my security group like…
smallbirds
  • 877
  • 12
  • 35
2
votes
1 answer

Not able to telnet from one AWS instance to another (to resolve master_not_discovered_exception)

I have 2 AWS EC2 instances which have the same security group: When I'm running curl -XGET 'http://localhost:9200/_cluster/state/master_node?pretty' from the nodes (works only on master), I get: master_not_discovered_exception I tried to telnet…
2
votes
1 answer

AWS Security group : source of inbound rule same as security group name?

I have a ec2 instance that is running a website and associates ALB. normally as a practice inside the ec2 instance security group, alb security group is referenced, but here the client has a configuration in such a way that inside ec2 instance the…
Jatin Mehrotra
  • 9,286
  • 4
  • 28
  • 67
2
votes
2 answers

Attach Security group to EKS on Fargate profile

I can't access RDS through pods running in EKS on Fargate, but I can do so via pods running on EC2 because the security group was attached while creating the node group. How can I do the same for Fargate?
sap
  • 234
  • 5
  • 16
2
votes
1 answer

Sagemaker Train Job can't connect to ec2 instance

I have MLFlow server running on ec2 instance, port 5000. This ec2 instance has security group with opened TCP connection on port 5000 to another security group designated for SageMaker. ec2 instance inbound rules: SageMaker outbound rules: These 2…
2
votes
1 answer

How to append or delete the ingress/egress rule for a security group using Terraform?

Is there a way to manage AWS security Groups in Terraform to edit rules for an existing SG? e.g: If I provision a new instance the ingress rules of an existing SG is updated to allow the newly provisioned instance. The SG also needs to update when…
2
votes
1 answer

Terraform AWS Security group entries for RDS

I am trying to create VPC with security groups and use them with ec2 and RDS. Created security group SG1 for ec2 with port 80 open Created security group rdssg with reference to first security group sg1 resource "aws_vpc" "dev-vpc" { …
Sudhir Jangam
  • 646
  • 2
  • 13
  • 20