Questions tagged [aws-vpc]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
15 views

What if EC2 in public subnet is not assigned public IPv4

Hi I'm struggling to understand of public vs private communication in Amazon VPC. what if EC2 instance is not assigned public ipv4 in public subnet, can it get traffic/data from any other EC2 ...
0
votes
0answers
27 views

How to improve network for Fargate based infrastructure

I am running my application (4 services) in AWS Fargate. Containers are stored in AWS ECR. Last month I ended up with a huge bill for transferred data because of constant download container from ECR ...
1
vote
1answer
334 views

Why do I need a Nat Gateway for ECS containers using AWSVPC?

So here is a scenario: I have a route table that routes all traffic to the internet gateway, and I have a subnet associated with that route table, which makes it a public subnet. Now I create another ...
4
votes
2answers
42 views

One NAT attachment for two private subnets

I have two NAT gateway attachments for two private subnets in AWS. Is it possible to have one NAT gateway attachment for two private subnets so that I can save one EIP?
1
vote
1answer
395 views

Troubleshooting VPC flow logs with an S3 bucket using SSE-KMS encryption with CMK

I'm using Terraform and trying to set up automatic export of VPC flow logs into an S3 bucket in the same AWS account and region (ca-central-1) that has default encryption turned on with AWS-KMS (using ...
1
vote
0answers
9 views

Input VPC ID values

I have a current stack that has this on the output of the CloudFormation template VPCId: Description: The ID of the VPC that this stack is deployed in Value: !Ref 'VPC' Export: ...
2
votes
2answers
2k views

How to get VPC id in Terraform module?

I have a module structure like module "vpc" { source = "./modules/vpc" } module "prod_subnets" { source = "./modules/vpc/modules/subnets/production" } when running am getting an error like [0m on ...
0
votes
1answer
34 views

Unable to connect to remote service using AWS VPC Peering

I have a question regarding some AWS infra I'm trying to build. Due to legacy constraints, I have a service running in a remote VPC that I need to access, and I have a new service I'm developing in ...
2
votes
2answers
705 views

Configure VPC for ECR access

I am creating my infrastructure with Ansible. I create a VPC and an ECS cluster where I use Fargate to run my docker containers. When the tasks are started I am prompted that the task was not able to ...
1
vote
1answer
42 views

can't access my instances by public IP in a VPC (aka: what is wrong with my terraform)?

As stated in the title of the question, I have a Terraform file (attached below), but the infrastructure it builds doesn't allow me to connect by SSH (I get "Connection timed out"). So either the ...
-1
votes
1answer
58 views

Ansible ec2_vpc_net and ec2_vpc_subnet - where to set subnet default public ip

Since upgrading to these 2 Ansible modules I am having difficulties in setting the subnets to have default public IP when new instances are created by autoscaling? I can't find any setting on the ...
0
votes
1answer
596 views

Using Amazon VPC provided DNS trough AWS Site-to-Site VPN

Currently I have an AWS VPC connected to our corporate network using AWS Site-to-Site VPN. I can reach my EC2 instances trough the tunnel by their private IP Address. Inside the VPC each EC2 ...
1
vote
1answer
21 views

Which option do I select for Security Group Source?

I am developing my Security Group for a VPC that has my Elasticbeanstalk, RDS and ElastiCache services and I am at this dashboard: Under Source, it used to be that you could select sg-0x12345-my-...
2
votes
1answer
372 views

How to Block Traffic From a Single IP in AWS

Our server being hammered by traffic from some particular IP. It was causing a 20x increase in traffic to some URLs. So I wanted to block all traffic from that single IP.
1
vote
1answer
316 views

How to Allow AWS S3 Access From only Specific IPs

Recently we were testing with AWS VPC, and a requirement for our project was that we needed to allow nodes within a VPC access to S3 buckets, but deny access from any other IP address. Is there ...
0
votes
3answers
782 views

Jenkins in private subnet

For development environment, to be used by multiple developers, we have a pipeline to be created with Git-Jenkins-Tomcat(dev) Do I need to place jenkins in private subnet and access thru bastion host?
2
votes
1answer
4k views

Access S3 files from Datacenter over VPN to VPC

I am trying to access S3 files from non-EC2 machine. non-EC2 machine is connected to VPC over VPN, also can reach to other hosts in VPC. Created VPC Endpoint for S3 Main routing table of VPC has ...
0
votes
1answer
66 views

Communication between VPCs and a transit VPC hosting VPN Server without Masking source IP

I am setting up a VPN Server to move all resources behind VPN on AWS, which includes moving multiple VPCs. The simple setup is: I have a separate VPC (VPC1) running VPN Server and another VPC (VPC2) ...
3
votes
2answers
3k views

Placing an AWS Lambda in a public subnet

Is it possible to place an aws lambda in a public subnet and thus avoid paying for NAT? The docs state the following If your Lambda function needs Internet access, do not attach it to a public ...
4
votes
1answer
2k views

Why don't the instances in the auto-scaling group get assigned public ip addresses unless it's a default vpc?

I'm trying to migrate our deployment process over to aws code deploy (by following instructions here:https://pionect.nl/autoscaling-aws-laravel-codedeploy-opsworks-chef-automation/). When I'm ...
1
vote
1answer
1k views

Migrate Rancher host from server to server

I have 4 Rancher servers: one for each environment: dev, sandbox, staging & prod. 3 of them are of an older Rancher 1.4 version (sandbox, staging, prod) & are hosted on OVH hosting, the one ...
2
votes
1answer
31 views

Can you replicate Active Directory from a Corporate Intranet to an AWS VPC where there is an outbound-only link?

In our work environment we have a standard Corporate Intranet with Active Directory. We've been granted limited access to an AWS VPC. Our connection allows outbound (from the Intranet to the VPC) ...
0
votes
2answers
6k views

How do I launch Lambda in my own VPC?

The VPC configurations option in Lambda tells this: All AWS Lambda functions run securely inside a default system-managed VPC. However, you can optionally configure Lambda to access resources, ...
11
votes
1answer
2k views

How to automatically remove a dead node from RabbitMQ cluster

I am planning to create RabbitMQ cluster using Ansible on AWS VPC with Amazon internal load balancer as the frontend to point connections to it. Any suggestion how to remove a dead node from RabbitMQ ...