Questions tagged [aws-vpc]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
22 views

How to improve network for Fargate based infrastructure

I am running my application (4 services) in AWS Fargate. Containers are stored in AWS ECR. Last month I ended up with a huge bill for transferred data because of constant download container from ECR ...
1
vote
1answer
94 views

Why do I need a Nat Gateway for ECS containers using AWSVPC?

So here is a scenario: I have a route table that routes all traffic to the internet gateway, and I have a subnet associated with that route table, which makes it a public subnet. Now I create another ...
4
votes
2answers
37 views

One NAT attachment for two private subnets

I have two NAT gateway attachments for two private subnets in AWS. Is it possible to have one NAT gateway attachment for two private subnets so that I can save one EIP?
1
vote
1answer
182 views

Troubleshooting VPC flow logs with an S3 bucket using SSE-KMS encryption with CMK

I'm using Terraform and trying to set up automatic export of VPC flow logs into an S3 bucket in the same AWS account and region (ca-central-1) that has default encryption turned on with AWS-KMS (using ...
1
vote
0answers
9 views

Input VPC ID values

I have a current stack that has this on the output of the CloudFormation template VPCId: Description: The ID of the VPC that this stack is deployed in Value: !Ref 'VPC' Export: ...
1
vote
1answer
734 views

How to get VPC id in Terraform module?

I have a module structure like module "vpc" { source = "./modules/vpc" } module "prod_subnets" { source = "./modules/vpc/modules/subnets/production" } when running am getting an error like [0m on ...
0
votes
1answer
29 views

Unable to connect to remote service using AWS VPC Peering

I have a question regarding some AWS infra I'm trying to build. Due to legacy constraints, I have a service running in a remote VPC that I need to access, and I have a new service I'm developing in ...
2
votes
2answers
498 views

Configure VPC for ECR access

I am creating my infrastructure with Ansible. I create a VPC and an ECS cluster where I use Fargate to run my docker containers. When the tasks are started I am prompted that the task was not able to ...
1
vote
1answer
34 views

can't access my instances by public IP in a VPC (aka: what is wrong with my terraform)?

As stated in the title of the question, I have a Terraform file (attached below), but the infrastructure it builds doesn't allow me to connect by SSH (I get "Connection timed out"). So either the ...
-1
votes
1answer
51 views

Ansible ec2_vpc_net and ec2_vpc_subnet - where to set subnet default public ip

Since upgrading to these 2 Ansible modules I am having difficulties in setting the subnets to have default public IP when new instances are created by autoscaling? I can't find any setting on the ...
0
votes
1answer
449 views

Using Amazon VPC provided DNS trough AWS Site-to-Site VPN

Currently I have an AWS VPC connected to our corporate network using AWS Site-to-Site VPN. I can reach my EC2 instances trough the tunnel by their private IP Address. Inside the VPC each EC2 ...
1
vote
1answer
20 views

Which option do I select for Security Group Source?

I am developing my Security Group for a VPC that has my Elasticbeanstalk, RDS and ElastiCache services and I am at this dashboard: Under Source, it used to be that you could select sg-0x12345-my-...
2
votes
1answer
211 views

How to Block Traffic From a Single IP in AWS

Our server being hammered by traffic from some particular IP. It was causing a 20x increase in traffic to some URLs. So I wanted to block all traffic from that single IP.
1
vote
1answer
188 views

How to Allow AWS S3 Access From only Specific IPs

Recently we were testing with AWS VPC, and a requirement for our project was that we needed to allow nodes within a VPC access to S3 buckets, but deny access from any other IP address. Is there ...
0
votes
3answers
625 views

Jenkins in private subnet

For development environment, to be used by multiple developers, we have a pipeline to be created with Git-Jenkins-Tomcat(dev) Do I need to place jenkins in private subnet and access thru bastion host?
2
votes
1answer
3k views

Access S3 files from Datacenter over VPN to VPC

I am trying to access S3 files from non-EC2 machine. non-EC2 machine is connected to VPC over VPN, also can reach to other hosts in VPC. Created VPC Endpoint for S3 Main routing table of VPC has ...
0
votes
1answer
65 views

Communication between VPCs and a transit VPC hosting VPN Server without Masking source IP

I am setting up a VPN Server to move all resources behind VPN on AWS, which includes moving multiple VPCs. The simple setup is: I have a separate VPC (VPC1) running VPN Server and another VPC (VPC2) ...
2
votes
2answers
2k views

Placing an AWS Lambda in a public subnet

Is it possible to place an aws lambda in a public subnet and thus avoid paying for NAT? The docs state the following If your Lambda function needs Internet access, do not attach it to a public ...
3
votes
1answer
1k views

Why don't the instances in the auto-scaling group get assigned public ip addresses unless it's a default vpc?

I'm trying to migrate our deployment process over to aws code deploy (by following instructions here:https://pionect.nl/autoscaling-aws-laravel-codedeploy-opsworks-chef-automation/). When I'm ...
1
vote
1answer
1k views

Migrate Rancher host from server to server

I have 4 Rancher servers: one for each environment: dev, sandbox, staging & prod. 3 of them are of an older Rancher 1.4 version (sandbox, staging, prod) & are hosted on OVH hosting, the one ...
2
votes
1answer
29 views

Can you replicate Active Directory from a Corporate Intranet to an AWS VPC where there is an outbound-only link?

In our work environment we have a standard Corporate Intranet with Active Directory. We've been granted limited access to an AWS VPC. Our connection allows outbound (from the Intranet to the VPC) ...
0
votes
2answers
6k views

How do I launch Lambda in my own VPC?

The VPC configurations option in Lambda tells this: All AWS Lambda functions run securely inside a default system-managed VPC. However, you can optionally configure Lambda to access resources, ...
11
votes
1answer
2k views

How to automatically remove a dead node from RabbitMQ cluster

I am planning to create RabbitMQ cluster using Ansible on AWS VPC with Amazon internal load balancer as the frontend to point connections to it. Any suggestion how to remove a dead node from RabbitMQ ...