Questions tagged [vpc-endpoint]

111 questions
0
votes
1 answer

Accessing AWS services from a lambda in a private subnet

I'm working on an serverless application the works with a database in RDS. For security reasons, both the application (Lambda) and the database are located in a private subnet in a VPC. I also want to access AWS services from the application - for…
0
votes
1 answer

AWS API Gateway with resource policy V.S. with VPC Endpoint

I'm trying to create a private API using AWS API Gateway. In my understanding, I have 2 options to implement private API Gateway, 1) restrict sources with API Gateway resource policy and 2) restrict sources within a VPC with VPC Endpoint. My…
0
votes
1 answer

DynamoDb - Gateway VPC endpoint "across two accounts"

Infrastructure description: I have a dynamo db table in one AWS account (Say A1) and an application hosted in EC2 in another account (say A2) /VPC-private subnet. This app (in account A2) reads/writes that dynamo db table in account A1. Both…
Satheesh K
  • 67
  • 9
0
votes
1 answer

Flink FileSync with AWS S3 plugin throw error when accessing S3 access point - "null uri host"

After following this instruction I am able to access the S3 bucket via access point + VPC endpoint perfectly fine from AWS CLI. Basically I use s3://arn:aws:s3:ap-southeast-1::accesspoint/ the same way as I…
0
votes
1 answer

How to Publish/Subscribe an event to IOT through VPC endpoint(AWS)

I tried to publish an event from Lambda function to IOT, which execution environment resides in VPC private subnets but it is not working. I have an IOT device which policy is configured to allow all connections. Created a VPC with two private…
0
votes
1 answer

Lambda in VPC timeouts when calling public apigateway url

We have lambda connected to Kinesis that sends data to a Websocket connection via Apigateway. Lambda sits in the VPC and there is also VPC Endpoint to service: com.amazon.us-east-1.execute-api. The problem is that call (from lambda) times out when…
0
votes
1 answer

VPC Endpoint: Specific Services Not Available in Availability Zone

When I attempt to create a VPC Endpoint for the com.amazonaws.us-east-1.lambda (lambda service), the "us-east-1a" Availability Zone is not an option. However, when I choose a different service, like "com.amazonaws.us-east-1.rds", I can choose a…
Coogie7
  • 189
  • 1
  • 11
0
votes
0 answers

NLB Target Group and Healthcheck Failing

I am wanting to create a vpc endpoint service in order to provide a way for our internal apps to bypass our SSO page when calling JIRA. Following this documentation:…
AWhitaker
  • 123
  • 4
0
votes
0 answers

AWS NAT Gateway: What AWS VPC endpoints I need?

We have an VPC with 3 public subnets and 3 private subnets. Public subnets reach Internet across an Internet Gateway. Private subnets reach Internet across its own NAT Gateway (One for each). After created a couple of batch compute environments and…
0
votes
1 answer

VPC Endpoint DNS not responding

I have a setup that consists of an ECS Ec2Service with a single instance running a task that sends an SNS message to a topic whenever the /index page is hit. Everything works fine and I'm able to do Publish the message to the topic if I use regular…
0
votes
1 answer

How to respond from a Lambda inside Private Subnet to a API Gateway Web Socket, using VPC Link and VPC Endpoint

I'm migrating from an architecture that I have a Lambda inside a Private Subnet, talking with a Public Subnet that has a NatGateway, triggered by an API Gateway WebSocket. And now I removed the Nat Gateway and inserted a VPC Endpoint with a VPC…
0
votes
1 answer

AWS STS Endpoints works only for one subnet of one zone. STS connection does not work in another zone

My environments are all private. I have a created an STS endpoint in ca-central-1. It has 2 subnets, one for ca-cental-1a and another in ca-central-1b. For some odd reason for both my environments that have the same sts endpoints settings, the STS…
0
votes
1 answer

PrivateLink for aurora

I need to create a private endpoint to access aurora service so that public access to service is denied. As I am new to it .. so need help with this. I went through different docs but still not able to get the info I need. Thanks in advance for any…
sam
  • 29
  • 3
-1
votes
1 answer

Why AWS VPC Interface endpoints (when resource can be confined within VPC)?

I am experimenting with AWS DMS right now. I see that AWS DMS supports both VPC (DMS replication instance has to be confined to a VPC during creation) and interface VPC endpoints. Question: If a resource can be confined to a VPC, and by default,…
user1872325
  • 71
  • 1
  • 9
-1
votes
1 answer

Terraform AWS: Cannot output VPC endpoints. Unsupported attribute

I cannot output vpc endpoints. I got module.vpc-endpoints-oregon is an object. This object does not have an attribute named "endpoints". In the modules/vpc_endpoints folder, there are three files, main.tf outputs.tf variables.tf cat…