Questions tagged [aws-vpn]

AWS Virtual Private Network (AWS VPN) lets you establish a secure and private tunnel from your network or device to the AWS global network. AWS VPN is comprised of two services: AWS Site-to-Site VPN and AWS Client VPN. AWS Site-to-Site VPN enables you to securely connect your on-premises network or branch office site to your Amazon Virtual Private Cloud (Amazon VPC). AWS Client VPN enables you to securely connect users to AWS or on-premises networks.

Documentation: https://aws.amazon.com/vpn/faqs/

80 questions
1
vote
1 answer

AWS Transit Gateway Cross Account VPC Access using AWS Client VPN Endpoint

I am trying to connect to one of my EC2 from my local machine using AWS Client VPN Endpoint. I have Landing Zone Setup. Transit Gateway and AWS Client VPN Endpoint is created in Shared Account and Transit Gateway is shared with Application Account…
Shivkumar Mallesappa
  • 2,875
  • 7
  • 41
  • 68
1
vote
1 answer

AWS keep site to site VPN connection alive

We have a site to site VPN connection from our AWS cloud to the customer's on site network. Our web application login requires the authentication from the customer's active directory and hence the need for VPN connection. When our application is not…
codeinprogress
  • 3,193
  • 7
  • 43
  • 69
1
vote
0 answers

AWS Client VPN - restrict access by IP address?

I am using AWS Client VPN with mutual authentication and I would like to restrict the access to my VPN endpoint(s) by specific user IP addresses. Is this possible ?
1
vote
1 answer

AWS VPN: How to create and import a Self-Signed certificate using Powershell

I am attempting to create a certificate for use in the AWS VPN and OpenVPN using Powershell. I find the documentation less than helpful. Is there a good site ?
jlo-gmail
  • 4,453
  • 3
  • 37
  • 64
1
vote
1 answer

How to add the Name of AWS Client VPN Endpoints?

The source code below provisions the AWS client VPN. After Client VPN Endpoints created, I login to AWS console, clicked on "Client VPN Endpoints", at right hand, it shows the values of "Endpoint ID", "State" and "Client CIDR". But, the value of…
Melissa Jenner
  • 781
  • 1
  • 8
  • 31
1
vote
1 answer

AWS - Private static IP address for Fargate task

I have the following situation. I have a VPC on AWS. In this VPC, I have an ECS Fargate cluster with multiple different tasks running. Additionally, I have a Site-to-Site VPN for one of my partners set up in this cluster. Now, this partner has to…
1
vote
1 answer

Trying to use aws-sdk from inside NodeJS AWS Lambda does timeout and not work, why?

I'm trying to use aws-sdk from NodeJS AWS Lambda where the Lambda is running inside a VPC on AWS. What I find is that when I make the AWS API call in my Lambda and then execute the Lambda it just times out with "Task timed out after 180.05 seconds",…
Phil
  • 46,436
  • 33
  • 110
  • 175
1
vote
1 answer

Connecting On-Prem network via transit gateway in the other aws account?

I have 2 aws accounts, where A is connected to On-Prem via transit gateway, and B is connected to A via peering connection. All works fine, thus I have connectivity from A to On-Prem, and from A to B. The challenge is to have connectivity from B to…
NarūnasK
  • 4,564
  • 8
  • 50
  • 76
1
vote
2 answers

How to allow traffic from VPN to access Internal Load Balancer (AWS)?

Is it possible to allow traffic from a Customer Gateway to access an Internal Application Load Balancer directly? I can access the Internal ALB via ec2 instances inside the VPC, however I would like to access it from my network. I have set up a…
0
votes
0 answers

Connecting Mongodb atlas endpoint with VPN

I have setup a mongodb atlas. Also, I have configured a VPC peering from mongodb atlas to my AWS VPC. I have allowed VPC CIDR in the IP access list on mongodb atlas and it's working fine. I also have a client VPN endpoint Which I am using to connect…
0
votes
0 answers

Connection failed after succesfull connection with AWS VPN on Ubuntu 22.04

I have been trying to connect aws vpn on a ubuntu 22.04 machine and first i got many crashes, then i learned that aws doesn't support libssl3 so i switched it to libssl1 by using wget…
utkuyceng
  • 43
  • 6
0
votes
0 answers

AWS VPN using Google IdP saml app - multiple CVPN endpoints?

How do I use Google IdP for multiple AWS VPN endpoints? I am able to set up Google as the IdP to use with AWS VPN using the steps here. I would like to use Google as the IdP for other AWS VPN endpoints (one for Dev and one for Prod). I am getting…
Nova
  • 1,234
  • 3
  • 12
  • 25
0
votes
0 answers

How to restrict ingress traffic only to 443 UDP via `aws_security_group` to VPN Client endpoint?

I was tried to follow this and this instructions to restrict traffic to Client VPN endpoint only to 443 port resource "aws_security_group" "vpn_secgroup" { name = "vpn-sg" vpc_id = module.vpc.vpc_id description = "Allow inbound traffic from…
Eugen Konkov
  • 22,193
  • 17
  • 108
  • 158
0
votes
1 answer

Accessing private URL from GitHub actions

On AWS we have an EKS and VPC Endpoint. Inside EKS we have deployed unpub server (https://pub.dev/packages/unpub) and we are accessing it over AWS VPN using this url http://unpub.internal.abc . For AWS VPN we are using SSO based authentication. All…
Faisal Shani
  • 698
  • 1
  • 13
  • 37
0
votes
1 answer

AWS Client VPN Security Group per groupID

I created a client VPN endpoint which uses Active directory as an authentication method. This client VPN is supposed to allow access to private resources on our AWS VPC. Now I understand that the "Target network associations" have security groups to…
Vincent
  • 1
  • 2