Questions tagged [aws-vpc]
The aws-vpc tag has no usage guidance.
34
questions
0
votes
1
answer
50
views
AWS lambda failed after enabled VPC
I am getting connection timeout error with VPC enabled but working fine without enabled VPC.
{
"errorMessage": "HTTPSConnectionPool(host='huggingface.co', port=443): Max retries ...
- 101
1
vote
0
answers
11
views
Connecting multiple VPCs [closed]
Good morning, I currently have four hosting providers:
AWS
Azure
Contabo
Housing
I would like to control access via a VPN, with certificate authentication.
How could I do to centralize everything in ...
- 11
0
votes
0
answers
29
views
How to configure shared VPC for kOps?
As described in this documentation, I want to create a Kubernetes cluster using kOps in an existing VPC. I have created a VPC, Internet Gateway, Route Table, Subnet and an EC2 instance which I want to ...
- 101
0
votes
0
answers
23
views
How to migrate VPC in AWS?
We are trying to move towards canary deployments.
We want to be able to spin up an entirely new deployment and be able to access the DB, but the DB is privately connected to the existing VPC for ...
- 101
0
votes
1
answer
108
views
Publish python package into private repository behind VPN
I'm using Github Actions to publish my python packages automatically. When working with PyPI everything works fine and providing different config to point on different repository is not an issue.
But ...
- 103
3
votes
1
answer
727
views
AWS-Terraform VPC difference between aws_route_table and aws_route
I'm struggling to understand the difference between the following Terraform Resources:
Example 1:
resource "aws_route_table" "public_1" {
vpc_id = aws_vpc.test.id
route {
...
- 31
0
votes
0
answers
77
views
How to set the vpc quota value for the terraform vpc module for aws?
I have a terraform module defined like so:
module "vpc" {
source = "terraform-aws-modules/vpc/aws"
version = "2.77.0"
name = "test_vpc"
...
- 101
0
votes
1
answer
85
views
Unable to connect from my local system to ec2 instance created by terraform script
Following is the source code:
variable "ec2_instance_type_name" {
type = string
default = "t2.nano"
}
terraform {
required_providers {
aws = {
...
1
vote
1
answer
349
views
Unable to ssh into EC2 instance to the peered VPC which is in different region
It's a very simple setup in which there are two EC2 instances each in a different region but under the same account. Both are peered.
Requester EC2 EC2Virginia has the following details:
Public IP: 34....
0
votes
1
answer
2k
views
Terraform get subnet id by it's CIDR block
I have a list of CIDRs for my subnets and want to get their ids. Is it possible to do with terraform?
my_subnets = ["212.12.1.0/24", "212.12.2.0/24", "212.12.3.0/24"]
I ...
- 621
4
votes
1
answer
1k
views
How to auto generate a diagram out of my AWS VPC?
Does AWS provide a tool to visualize my VPC?
I would like to generate an image file with all services (shown as icons) provisioned inside a VPC.
Tools like draw.io and others are available. But doesnt ...
- 255
2
votes
2
answers
2k
views
Get a list of remote VPCs on AWS using Terraform?
I'd like to get a list of all remote VPCs from AWS with terraform. I've read the documentation and found two data sources:
AWS_DEFAULT_VPC
AWS_VPC
The first one will give you the default VPC and the ...
- 123
1
vote
1
answer
63
views
Common permissions for EC2 usage and VPC Security Groups in enterprise use
Context: Looking to create some software that acts as middleware to a user's AWS account, where the user will provide their cloud credentials, and have the software use their EC2 instances.
Question: ...
- 13
3
votes
2
answers
3k
views
Why do I need a Nat Gateway for ECS containers using AWSVPC?
So here is a scenario:
I have a route table that routes all traffic to the internet gateway, and I have a subnet associated with that route table, which makes it a public subnet. Now I create another ...
- 133
4
votes
2
answers
222
views
One NAT attachment for two private subnets
I have two NAT gateway attachments for two private subnets in AWS. Is it possible to have one NAT gateway attachment for two private subnets so that I can save one EIP?
- 171
2
votes
1
answer
2k
views
Troubleshooting VPC flow logs with an S3 bucket using SSE-KMS encryption with CMK
I'm using Terraform and trying to set up automatic export of VPC flow logs into an S3 bucket in the same AWS account and region (ca-central-1) that has default encryption turned on with AWS-KMS (using ...
- 331
2
votes
2
answers
15k
views
How to get VPC id in Terraform module?
I have a module structure like
module "vpc" {
source = "./modules/vpc"
}
module "prod_subnets" {
source = "./modules/vpc/modules/subnets/production"
}
when running am getting an error like
[0m on ...
- 121
0
votes
1
answer
107
views
Unable to connect to remote service using AWS VPC Peering
I have a question regarding some AWS infra I'm trying to build. Due to legacy constraints, I have a service running in a remote VPC that I need to access, and I have a new service I'm developing in ...
- 141
2
votes
2
answers
1k
views
Configure VPC for ECR access
I am creating my infrastructure with Ansible. I create a VPC and an ECS cluster where I use Fargate to run my docker containers.
When the tasks are started I am prompted that the task was not able to ...
- 115
1
vote
1
answer
59
views
can't access my instances by public IP in a VPC (aka: what is wrong with my terraform)?
As stated in the title of the question, I have a Terraform file (attached below), but the infrastructure it builds doesn't allow me to connect by SSH (I get "Connection timed out"). So either the ...
- 13
-1
votes
1
answer
72
views
Ansible ec2_vpc_net and ec2_vpc_subnet - where to set subnet default public ip
Since upgrading to these 2 Ansible modules I am having difficulties in setting the subnets to have default public IP when new instances are created by autoscaling?
I can't find any setting on the ...
- 650
1
vote
1
answer
2k
views
Using Amazon VPC provided DNS trough AWS Site-to-Site VPN
Currently I have an AWS VPC connected to our corporate network using AWS Site-to-Site VPN.
I can reach my EC2 instances trough the tunnel by their private IP Address.
Inside the VPC each EC2 ...
- 244
1
vote
1
answer
24
views
Which option do I select for Security Group Source?
I am developing my Security Group for a VPC that has my Elasticbeanstalk, RDS and ElastiCache services and I am at this dashboard:
Under Source, it used to be that you could select sg-0x12345-my-...
- 519
2
votes
1
answer
1k
views
How to Block Traffic From a Single IP in AWS
Our server being hammered by traffic from some particular IP. It was causing a 20x increase in traffic to some URLs. So I wanted to block all traffic from that single IP.
- 934
1
vote
1
answer
664
views
How to Allow AWS S3 Access From only Specific IPs
Recently we were testing with AWS VPC, and a requirement for our project was that we needed to allow nodes within a VPC access to S3 buckets, but deny access from any other IP address.
Is there ...
- 934
0
votes
3
answers
2k
views
Jenkins in private subnet
For development environment, to be used by multiple developers, we have a pipeline to be created with Git-Jenkins-Tomcat(dev)
Do I need to place jenkins in private subnet and access thru bastion host?
- 189
2
votes
1
answer
5k
views
Access S3 files from Datacenter over VPN to VPC
I am trying to access S3 files from non-EC2 machine. non-EC2 machine is connected to VPC over VPN, also can reach to other hosts in VPC.
Created VPC Endpoint for S3
Main routing table of VPC has ...
- 135
0
votes
1
answer
77
views
Communication between VPCs and a transit VPC hosting VPN Server without Masking source IP
I am setting up a VPN Server to move all resources behind VPN on AWS, which includes moving multiple VPCs.
The simple setup is:
I have a separate VPC (VPC1) running VPN Server and another VPC (VPC2) ...
- 103
8
votes
2
answers
8k
views
Placing an AWS Lambda in a public subnet
Is it possible to place an aws lambda in a public subnet and thus avoid paying for NAT?
The docs state the following
If your Lambda function needs Internet access, do not attach it to a public ...
- 181
4
votes
1
answer
3k
views
Why don't the instances in the auto-scaling group get assigned public ip addresses unless it's a default vpc?
I'm trying to migrate our deployment process over to aws code deploy (by following instructions here:https://pionect.nl/autoscaling-aws-laravel-codedeploy-opsworks-chef-automation/).
When I'm ...
- 473
1
vote
1
answer
1k
views
Migrate Rancher host from server to server
I have 4 Rancher servers: one for each environment: dev, sandbox, staging & prod.
3 of them are of an older Rancher 1.4 version (sandbox, staging, prod) & are hosted on OVH hosting, the one ...
- 111
2
votes
1
answer
46
views
Can you replicate Active Directory from a Corporate Intranet to an AWS VPC where there is an outbound-only link?
In our work environment we have a standard Corporate Intranet with Active Directory.
We've been granted limited access to an AWS VPC. Our connection allows outbound (from the Intranet to the VPC) ...
- 1,123
1
vote
2
answers
6k
views
How do I launch Lambda in my own VPC?
The VPC configurations option in Lambda tells this:
All AWS Lambda functions run securely inside a default system-managed
VPC. However, you can optionally configure Lambda to access resources,
...
- 2,826
11
votes
1
answer
3k
views
How to automatically remove a dead node from RabbitMQ cluster
I am planning to create RabbitMQ cluster using Ansible on AWS VPC with Amazon internal load balancer as the frontend to point connections to it.
Any suggestion how to remove a dead node from RabbitMQ ...
- 780