aws-vpc

How do I determine what a given AWS Security Group is associated with?

瘦欲@ 提交于 2021-02-19 02:18:16
问题 The AWS EC2 Security Groups documentation mentions that "Security groups for EC2-VPC have additional capabilities that aren't supported by security groups for EC2-Classic" but the Security Groups dashboard does not provide any information on the "capabilities" of attributes of Security Groups that allow me to distinguish what kind of Security Group I'm looking at or what it is attached to, so that, for example I can't figure out whether I can consolidate Security Groups and share them across

How do I determine what a given AWS Security Group is associated with?

核能气质少年 提交于 2021-02-19 02:14:39
问题 The AWS EC2 Security Groups documentation mentions that "Security groups for EC2-VPC have additional capabilities that aren't supported by security groups for EC2-Classic" but the Security Groups dashboard does not provide any information on the "capabilities" of attributes of Security Groups that allow me to distinguish what kind of Security Group I'm looking at or what it is attached to, so that, for example I can't figure out whether I can consolidate Security Groups and share them across

Access AWS S3 from Lambda within Default VPC

你。 提交于 2021-02-10 15:43:16
问题 I have a lambda function which needs to access ec2 through ssh and load files and save it to s3. So,for that I have kept ec2 and lambda both in default VPCs and same subnet. Now the problem is that I am able to connect the function to ec2 but not to s3. Its killing me since morning as when I remove the vpc settings it uploads the files to s3 ,but then connection to ec2 is lost. I tried to add a NAT gateway to default VPC(although I am not sure I did it correctly or not because I am new to

Fargate error: cannot pull container hosted in ECR from a private subnet

依然范特西╮ 提交于 2021-02-10 05:46:30
问题 I am trying to create a following architecture: a vpc with two subnets (one is public containing a NatGateway and an InternetGateway, and another one is private. I start a fargate service in a private subnet and it fails with this error: CannotPullContainerError: API error (500): Get https://XYZ.dkr.ecr.us-east-1.amazonaws.com/v2/: net/http: request cancelled while waiting for connection (Client.Timeout exceeded while awaiting headers) Here's my CloudFormation template (the service is

Fargate error: cannot pull container hosted in ECR from a private subnet

心不动则不痛 提交于 2021-02-10 05:46:29
问题 I am trying to create a following architecture: a vpc with two subnets (one is public containing a NatGateway and an InternetGateway, and another one is private. I start a fargate service in a private subnet and it fails with this error: CannotPullContainerError: API error (500): Get https://XYZ.dkr.ecr.us-east-1.amazonaws.com/v2/: net/http: request cancelled while waiting for connection (Client.Timeout exceeded while awaiting headers) Here's my CloudFormation template (the service is

VPN clients to resolve private DNS hostnames in AWS [closed]

只谈情不闲聊 提交于 2019-12-31 22:49:34
问题 Closed. This question is off-topic. It is not currently accepting answers. Want to improve this question? Update the question so it's on-topic for Stack Overflow. Closed last year . I've recently setup OpenVPN server on an AWS EC2 instance in order to connect my office to the AWS VPC environment. I'm using TunnelBlick as the VPN client and all is good! I can ssh to the private IPs in the VPC. However, resolving the DNS VPC names from my office hosts( which I could if i'd run it from an EC2

AWS Lambda ENI limitation in VPC clarification

风格不统一 提交于 2019-12-24 03:35:09
问题 I found this in the AWS official docs for lambda: If your Lambda function accesses a VPC, you must make sure that your VPC has sufficient ENI capacity to support the scale requirements of your Lambda function. You can use the following formula to approximately determine the ENI requirements. Projected peak concurrent executions * (Memory in GB / 3GB) I understand the reason behind this formula. My only question is: why 3GB? From where this number comes from? 回答1: The formula Projected peak

Access AWS Resource Outside of VPC from Within VPC - Serverless Framework

和自甴很熟 提交于 2019-12-07 11:38:47
问题 I am trying to access a kinesis stream outside a VPC from a lambda function inside a VPC. Currently when the code to write to the kinesis stream is executed it will hang and then timeout. When I take the lambda out of the VPC the code to write to the stream works fine. But I need to access a resource within the VPC and then write to the stream. Anyone know how to fix this? Here is my function that is in the VPC functions: handleChanges: handler: functions/handlers.handleChanges timeout: 10

Access AWS Resource Outside of VPC from Within VPC - Serverless Framework

℡╲_俬逩灬. 提交于 2019-12-05 12:20:33
I am trying to access a kinesis stream outside a VPC from a lambda function inside a VPC. Currently when the code to write to the kinesis stream is executed it will hang and then timeout. When I take the lambda out of the VPC the code to write to the stream works fine. But I need to access a resource within the VPC and then write to the stream. Anyone know how to fix this? Here is my function that is in the VPC functions: handleChanges: handler: functions/handlers.handleChanges timeout: 10 package: include: - functions/utils/** events: - http: method: POST path: "/" integration: lambda vpc: