Questions tagged [aws-vpn]

AWS Virtual Private Network (AWS VPN) lets you establish a secure and private tunnel from your network or device to the AWS global network. AWS VPN is comprised of two services: AWS Site-to-Site VPN and AWS Client VPN. AWS Site-to-Site VPN enables you to securely connect your on-premises network or branch office site to your Amazon Virtual Private Cloud (Amazon VPC). AWS Client VPN enables you to securely connect users to AWS or on-premises networks.

Documentation: https://aws.amazon.com/vpn/faqs/

80 questions
0
votes
1 answer

How do I access on-prem HTTP services from my Lambda function?

I've created a javascript lambda function that is triggered by an API gateway request. I've tested it from my frontend and it works fine (hosted outside AWS). However, from my function I need to call an HTTP service from my on-prem network as an API…
0
votes
1 answer

How to use nested count in terraform for creating VPN endpoint routes?

I want to create VPN client endpoint in AWS using terraform. My current block of code is: resource "aws_ec2_client_vpn_route" "vpn_route" { depends_on = [ aws_ec2_client_vpn_network_association.vpn_subnets ] count =…
0
votes
1 answer

add route in route table for aws client vpn endpoint to access S3 static website without exposing 0.0.0.0/0

I have a static website setup in S3 with a bucket policy that denies access to the website (simple index.html) unless it is from a VPC Endpoint. I configured the VPC Endpoint as com.amazonaws.us-east-1.s3 service: Gateway. If I add 0.0.0.0/0 into my…
dataviews
  • 2,466
  • 7
  • 31
  • 64
0
votes
1 answer

How to view / monitor packets (incoming/outgoing) of AWS Site-to-Site VPN

I want to monitor not just the metrics from my Site-to-Site VPN via CloudWatch, I ether want to see the whole incoming and outgoing traffic with source and destination addresses and packet types i.e. 1.2.3.4 => 12.20.12.1 ICMP (Port 123) In Client…
0
votes
1 answer

AWS Client VPN Access Public URL/IP

I have an AWS Landing Zone Setup. My Shared Account contains an AWS Client VPN. My Network Account contains Transit Gateway, this is shared with Production Account and Production Account VPC is attached. My Production Account contains a VPC which…
Shivkumar Mallesappa
  • 2,875
  • 7
  • 41
  • 68
0
votes
1 answer

AWS VPN tunnel established and able to ping against each other, but curl doesn't work

I'm trying to connect local machine to AWS VPC using site-to-site VPN. I've used ipsec protocol using libreswan, and succeeded to establish tunnel.(Confirmed at aws console that tunnel status is 'UP'). I was also bled to ping to each other, but not…
pjr
  • 37
  • 9
0
votes
1 answer

AWS to Azure connectivity: How to setup the Site to site connectivity?

I have requirement to connect both AWS & Azure sites - say, I have a VM in both AWS & Azure sites, I should be able to communicate between the VMs. How do I setup the VPN connection between AWS & Azure? any reference article would be helpful.
One Developer
  • 99
  • 5
  • 43
  • 103
0
votes
1 answer

Difference between AWS site-to-site VPN and Managed VPN

What is the difference between AWS Managed VPN and Site-to-site VPN
Ravi
  • 93
  • 1
  • 1
  • 5
0
votes
1 answer

AWS::EC2::VPNConnectionRoute - Parameter route=X.X.X.67/31 fails its validation function

I have one specific IP which I need to route through the VPN. I tried to providing that IP using a mask that provides the smallest possible subnet. vpcConnection: Type: 'AWS::EC2::VPNConnectionRoute' Properties: …
Leonard Saers
  • 649
  • 9
  • 28
0
votes
1 answer

Need end-to-end suggestion to connect EC2 instance to on-premises jump host which is in another cloud or data center

Actually I am having one use case like "I am having one ansible server in cloud for example EC2 instance and I am having one customer jump host in a data center or another cloud". I need to establish connection from ansible server to customer jump…
0
votes
1 answer

Reduce AWS Client VPN Billing

My AWS Client VPN cost is getting high, is there any way i can decrease it ? Things i had done to reduce cost currently is enabling Split-tunnel in vpn.
Sreeraju V
  • 535
  • 2
  • 5
  • 19
0
votes
1 answer

How to connect to AWS Elastic Search with from Browser with AWS Client VPN?

I have a AWS VPC with 3 private (A, B, C) and 1 public subnet. I have created a Client VPN which has association with A and B. Authorization Rules are for anyone. The route tables are the default route tables of A and B (which is the main route…
0
votes
0 answers

How to allow AWS Client VPN access to Elastic Load Balancer

I created an AWS Client VPN endpoint which is connected to my VPC. I can access all EC2s inside my VPC and and set the EC2 security groups to allow traffic only from the VPN security group. I added an ingress rule to the HTTPS port of the…
0
votes
1 answer

AWS VPNConnection using PowerShell

I am trying to setup a new vpn connection with the AWS transit gateway using PowerShell. I need some assistance on how to setup tunnel options. AWS has very limited documentation with examples. Here is the link to the documentation:…
0
votes
0 answers

S3 Object cannot be viewed from browser in ClientVPN Private Subnet

We've a local system server in AWS VPC Private Subnet, and we have configured AWS ClientVPN to access that instance with that VPN Client called Pritunl. And we've stored all of documents and images in AWS S3 that configured with VPC Endpoint…
PPShein
  • 13,309
  • 42
  • 142
  • 227