1

I am trying to access S3 files from non-EC2 machine. non-EC2 machine is connected to VPC over VPN, also can reach to other hosts in VPC.

I am able to download (wget) file from S3 to EC2 in the VPC. When I try to do same (wget) from non-EC2 (which is in Data Centre), I get timeout.

Anyone know what I need to do to get this working ?

  • This is exactly what I'm trying to do.. – monkut Jul 18 at 2:50
2

You need to use...

  • the Internet, from your data center, to access S3 directly (not via the endpoint) or
  • an AWS DirectConnect connection to access S3 directly (not via the endpoint) or
  • an HTTP proxy server inside this VPC to access S3 (via the endpoint)

...because S3 endpoints are not designed to be used across VPN connections. They are only accessible from instances in the VPC where they exist.

Endpoint connections cannot be extended out of a VPC. Resources on the other side of a VPN connection, VPC peering connection, AWS Direct Connect connection, or ClassicLink connection in your VPC cannot use the endpoint to communicate with resources in the endpoint service.

https://docs.aws.amazon.com/vpc/latest/userguide/vpce-gateway.html#vpc-endpoints-limitations

  • If I go with HTTP proxy server inside this VPC, can I still access rest of the VPC as it is ? or I need to whitelist it in proxy server ? – roy Dec 17 '18 at 22:13

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.