Questions tagged [private-subnet]

Use this tag for questions related to private subnets, i.e. subnets of a private network. A subnet is a part of a greater network/net.

This tag is used for questions related to the subnets of a (virtual) private network.

For example, one could use this tag when posting a question related to how his subnet can have Internet access.

129 questions
15
votes
1 answer

Do I need a separate NAT gateway for each private subnet?

On AWS, let's say I have 3 private subnets in 3 different AZs and I want all of them to be able to access the internet through a NAT gateway. AWS guides suggest having separate NAT gateways and bastion hosts for each subnet (assuming they're needed…
lfk
  • 2,423
  • 6
  • 29
  • 46
9
votes
1 answer

AWS VPC subnet route table best practices

In AWS we have subnets tired like public and private subnets. To simplify the question, I am only referring to the private subnet. I know we can use single routing table for private subnets in all AZs, or we can use multiple routing table per…
hlesnt395
  • 603
  • 10
  • 30
8
votes
3 answers

AWS ECS Private and Public Services

I have a scenario where I have to deploy multiple micro-services on AWS ECS. I want to make services able to communicate with each other via APIs developed in each micro-service. I want to deploy the front-end on AWS ECS as well that can be accessed…
5
votes
1 answer

AWS RDS "Publicly Accessible = No" vs instance in private subnet

I am creating infrastructure for one of my web application on AWS. That app needs Mysql RDS instance. Now I am wondering that whether I should simply create RDS instance in public subnet and just change its settings to Publicly Accessible=No, or I…
4
votes
1 answer

Launch EC2 servers in multiple subnets using count with terraform

I have a use case where I have set variable instance_count = 3 and I have 2 Private_subnets which is a list ["subnet-id-A", "subnet-id-B"], what I want my terraform code to dynamically generate a local map or list which can be like this subnets =…
4
votes
1 answer

Elastic Load Balancer pointing at Private Subnet

I've created a internet-facing Elastic Load Balancer to point at my EC2 Instances in an VPC as I have many times before however with this one I am using a private subnet with a nat gateway to control outgoing traffic and channel it all through a…
3
votes
2 answers

How to import existing private subnets in a VPC in AWS CDK using TypeScript?

I have few private subnets in my VPC and i'm trying to import them using typescript as shown below: vpc1 = ec2.Vpc.fromLookup(this, 'myVpc',{isDefault: false, vpcId:vpcId }); // Iterate the private subnets const selection =…
Bharath Bharath
  • 59
  • 1
  • 10
3
votes
2 answers

Why does EMR in private subnet need full outbound internet access

AWS documentation on below link asks to allow full outbound internet access on EMR master security group for the cluster which is in private…
3
votes
2 answers

How to connect to EC2 instance which is in Private subnet from my Windows OS client machine through Bastion host.?

I have a scenario as following, I have one EC2 instance in private subnet and one EC2 instance in public subnet. How can I connect to private subnet EC2 instance through public subnet EC2 instance which is also called Bastion host (Jump box) from my…
3
votes
2 answers

IPV4 traffic not working with AWS egress only internet gateway

I have assigned an egress only internet gateway to my private subnet. Now I can connect with IPV6 websites but not with IPV4 addresses. Do I need NAT gateways to access IPV4 address from my EC2 machine? (Only outgoing traffic)
3
votes
1 answer

EC2 instances in private subnets cannot access amazon repository

I am trying to create ECS cluster and I have manually built VPC with 3 public and 3 private subnets. All 3 public subnets have IGW attached to them with 0.0.0.0/0 and all 3 private subnets have NAT Gateways attached in route tables with 0.0.0.0/0.…
2
votes
5 answers

What makes a subnet as private in aws

I have some beginner question doubt. I have a subnet whose route table is pointing to internet gateway (0.0.0.0/0). However the public ip address assignation is not enabled. Does that make this as private or public subnet? There are no nat gateway…
Developer404
  • 5,716
  • 16
  • 64
  • 102
2
votes
1 answer

Security Group settings for using sagemaker notebooks in private subnet

I am new to sagemaker, and am hoping to use sagemaker in a VPC with a private subnet, so data accessed from s3 is not exposed to public internet. I have created a vpc with a private subnet (no internet or nat gateway), and have attached a vpc s3…
2
votes
1 answer

Terraform getting timeout on wait_for_cluster and breaking provisioning of EKS

I'm trying to create an AWS EKS private cluster using Terraform with the private subnet in VPC in AWS region us-west-2 region, with default terraform eks module configurations. When I set the endpoint_private_access=true and…
2
votes
1 answer

AWS private subnet with NAT gateway and VPC PrivateLink: which one will be used?

Say I have an ec2 in a private subnet with access to the internet through a NAT Gateway and I have VPC endpoints (PrivateLink) for AWS services like DynamoDB or SNS. If my ec2 instance needs to interact with those services, it will use the private…
1
2 3
8 9