Questions tagged [transit-gateway]

30 questions
4
votes
1 answer

Run terraform modules conditionally

I am trying to run modules conditionally. Below is the code. It works fine if the values are provided but if var.accounts[*].vpc_ids is blank, it fails saying var.vpc_id can't be empty. But that is basically the condition based on which the modules…
Maya Ray
  • 523
  • 1
  • 7
  • 21
4
votes
1 answer

Error: Invalid Index The given key does not identify an element in this collection value Transit gateway routes

I am trying to create routes in transit gateway route table. Below is the code block. locals { vpc_attachments_with_routes = chunklist(flatten([ for k, v in var.vpc_attachments : setproduct([{ key = k }], v["tgw_route"]) if length(lookup(v,…
2
votes
1 answer

TransitGatewayRouteTableId for default TransitGatewayRouteTable

I am using the following settings for creating a transit gateway through CloudFormation. AutoAcceptSharedAttachments: disable DefaultRouteTableAssociation: enable DefaultRouteTablePropagation: enable I want to know how can one get the…
1
vote
1 answer

How to share an AWS Virtual Private Gateway via Transit Gateway

I have 2 AWS Accounts, A & B. Account A has a site-to-site vpn connection with an on-prem infrastructure and it is using Virtual Private Gateway and Customer Gateway as usual. I have configured all Subnets in Account "A" with a route to the on-prem…
Dennis Ruiz
  • 147
  • 1
  • 3
  • 11
1
vote
0 answers

Connect AWS Redshift cluster created in VPC A from VPC B

I have created an AWS Redshift cluster in VPC A in account 1234567890 and a transit Gateway in another AWS Account 9876543210. I want to access redshift cluster from VPC B in same account where VPC A is present 1234567890. I have updated the route…
1
vote
2 answers

Unable to create share for Transit Gateway via AWS Resource Access Manager

The resource you are attempting to share can only be shared within your AWS Organization. This error may also occur if you have not enabled sharing with your AWS organization, or that onboarding process is still in progress.
T_H
  • 49
  • 4
1
vote
1 answer

AWS Transit Gateway Cross Account VPC Access using AWS Client VPN Endpoint

I am trying to connect to one of my EC2 from my local machine using AWS Client VPN Endpoint. I have Landing Zone Setup. Transit Gateway and AWS Client VPN Endpoint is created in Shared Account and Transit Gateway is shared with Application Account…
Shivkumar Mallesappa
  • 2,875
  • 7
  • 41
  • 68
1
vote
2 answers

Error: Invalid index empty tuple The given key does not identify an element in this collection value

I am trying to create associations and routes in transit gateway route table. Below is the code block. locals { vpc_attachments_without_default_route_table_association = { for k, v in var.vpc_attachments : k => v if lookup(v,…
Maya Ray
  • 523
  • 1
  • 7
  • 21
1
vote
1 answer

Which AWS managed iam policy should be used for allowing transit gateway full access?

Iam creating a role and trying to attach an was managed policy for transit gateway full access. But I am not able to find any policy with transit gateway.
1
vote
1 answer

Does it matter to have created a transit gateway attachment in public or private subnets?

Does it matter if I had created my transit gateway attachment for VPC or Peering or even VPN in either public or private subnets? Are there any differences or scenarios that I need to take note of when creating them in either public or private…
Carven
  • 14,988
  • 29
  • 118
  • 161
1
vote
2 answers

cloudwatch API to retrieve TransitGatewayAttachment metrics via python not working

I can retrieve the transitgateway metrics fine using code below, but it doesnt work when I do it for the tgw attachment. But I know there is stats because the network manager dashboard shows metrics for the tgw and all the attachment and graphs…
js9999
  • 13
  • 2
1
vote
1 answer

Connecting On-Prem network via transit gateway in the other aws account?

I have 2 aws accounts, where A is connected to On-Prem via transit gateway, and B is connected to A via peering connection. All works fine, thus I have connectivity from A to On-Prem, and from A to B. The challenge is to have connectivity from B to…
NarūnasK
  • 4,564
  • 8
  • 50
  • 76
0
votes
1 answer

I have trouble auto accepting a Transit Gateway Peering using Terraform

I wrote a script that peers two Transit gateways within the same region. A peering is created however, it is refusing to accept the requests. resource "aws_ec2_transit_gateway_peering_attachment" "TGW_A_B_Peering_Attachment_Request" { …
0
votes
0 answers

Is it possible to route outbound traffic from a VPC in one region through a VPC (and NAT gateway) in another region?

I have a number of resources in a VPC (ECS tasks mostly but doesn't really matter) where inbound traffic goes through an ALB. However, I need to route outbound traffic through another VPC (and its NAT gateway) in a separate region. I've been…
0
votes
1 answer

can not delete transit gateway attachment via aws cli

I can delete aws transit gateway attachment via UI, but not via aws cli: % /usr/local/bin/aws ec2 describe-transit-gateway-attachments --region ca-central-1 --transit-gateway-attachment-ids tgw-attach-00f7dc90293fb83a3 { …
user2913139
  • 557
  • 2
  • 5
  • 13
1
2