Questions tagged [vpc-endpoint]

111 questions
0
votes
0 answers

Getting Forbidden Error While Restricting Access to AWS Managed Grafana Using VPC Endpoint with Network Access Control

I am using AWS managed Grafana in one of the projects. I am able to access Grafana workspace URL without using Network Access Control as it allowed over the internet. But I need to restrict the access within our organization for which I am using…
0
votes
0 answers

Connecting to redshift from powerBI using an private hosted zone alias created in Route53

I have a redshift serverless workgroup (not public) that I can connect to from powerBI using the AWS generated redshift workgroup URL. However I want to provide a easy to remember URL to everyone to connect to the workgroup. We do have a private…
Vasu
  • 1,060
  • 10
  • 11
0
votes
1 answer

Minimally permissive security group rules with VPC Endpoints

I have a 2 VPC setup as follows: In the first VPC: A service in a private subnet A network load balancer for the service, also in the private subnet A VPC Endpoint Service for the load balancer In the second VPC: A VPC Endpoint ("Interface"…
sdgfsdh
  • 33,689
  • 26
  • 132
  • 245
0
votes
1 answer

Why outbound is not required on interface vpc endpoint

I have defined and been using AWS Interface VPC Endpoint, but I have one question. The question is about why inbound rules in the security group of Interface VPC Endpoint are sufficient for communication. For example, if I define an Interface VPC…
Hwan E
  • 566
  • 2
  • 13
0
votes
1 answer

Lambda invocations from a VPC don't go through the VPC interface endpoint for Lambda service

I have some ECS tasks deployed in the subnet of a VPC. All traffic from the private subnet is routed to a NAT in the public subnet, and all traffic from the public subnet is routed to an internet gateway. In this way, the ECS tasks may access the…
0
votes
0 answers

Getting VPC endpoint clouddwatch using AWS CLI \ boto3

I'm trying to fetch cloudwatch data about the BytesProcessed in my VPC endpoints in AWS using AWS CLI or boto3 and I get an empty answer although it isn't empty in cloudwatch UI. Please help me understand what I do wrong. I use the following CLI…
Tom Ron
  • 5,906
  • 3
  • 22
  • 38
0
votes
1 answer

Amazon MQ in shared VPC

I have a scenario where I am launching a AmazonMQ(Rabbit MQ) broker in shared vpc private subnets with private access, but it fails with the message as error info: Unable to create endpoints in the VPC to which the specified subnets belong. Please…
0
votes
1 answer

Pass an Output Value into a Data Block

I'd like to pass an output value into a data block but don't know how output "vpce_interface_ids" { value = join(",", aws_vpc_endpoint.vpce.network_interface_ids) } data "aws_network_interface" "ENI_0" { id = "" }
0
votes
0 answers

AWS Lambda can't connect to AWS SQS (VPC Endpoint)

I have an AWS Lambda connected to my RDS instance in a VPC via Security Group(s). Putting my AWS Lambda inside a VPC means it has no access to the public internet unless I create a VPC Endpoint. Since my Lambda is inside a VPC, it needs a VPC…
0
votes
0 answers

Iot Core Vpc Endpoint

I have created iot core vpc endpoint A record in a custom domain(not in xxxxxxxxxx-ats.iot.us-east-1.amazonaws.com format) in Private Hosted which routes to iot core vpce I can connect to public Iot core endpoint from device. if I use endpoint…
plankton
  • 59
  • 7
0
votes
0 answers

Why does my SQS Endpoint break Elastic Beanstalk?

I have some lambdas in a vpc that I thought needed an SQS Endpoint to access some SQS queues. After adding the SQS endpoint, I noticed that elastic beanstalk config changes were failing. Apparently the instances use a service called cfn-hup. This…
0
votes
1 answer

AWS Transfer or S3 VPC Interface EndPoint

I have a requirement to SFTP ".csv" files from corporate on-premise linux box to S3 bucket. The Current Setup is as follows: The on-premise linux box is NOT connected to internet. Corporate Network is connected with AWS with Direct Connect. There…
0
votes
0 answers

Connecting to an RDS Instance that is on VPC

I am trying to connect to my AWS RDS Mariadb instance that I am hosting on us-east/ohio from my local machine. I am trying to avoid making the instance publicly available but I am struggling to get this connection to work. Right now I am trying to…
0
votes
0 answers

What is an ideal place for creating GCP Private Service Connect Endpoint, Publish Service etc. in case of "Shared VPC" setup?

I understand GCP Private Service Connect (PSC) is an effective solution for enabling service-centric private network connectivity for GCP APIs and other hosted services within and across VPC projects/organizations/on-prem setup based on…
Rashmit Rathod
  • 753
  • 7
  • 11
0
votes
0 answers

Trying to Associate multiple route tables to the S3 VPC Endpoint ( Gateway ) using Terraform

I can associate single route table to the AWS VPC Endpoint for S3. But not able to associate multiple route tables with AWS VPC Endpoint for S3. **Getting below error : STDERR: \\nError: Invalid index\\n\\n on aws_vpc_endpoints/locals.tf line 30,…