How to use AWS VPC endpoint? (Full Demo)
Ғылым және технология
Title = VPC Endpoint to access Private RDS instance API calls from Private EC2 instance.
The following are the details of the setup we need to create for this Demo:
VPC
1) We will create a VPC (10.0.0.0/16)
2) We will create a 2 private subnet (10.0.0.0/24 and 10.0.1.0/24) and 2 public subnet (10.0.2.0/24 and 10.0.3.0/24)
3) We will create 2 Route Table (public RT and Private RT)
4) We will create 1 Internet Gateway and attach it to the Public RT
EC2
1) Create 2 EC2 instances ( 1 as a public instance and 1 as a private instance)
VPC Endpoint
1) Create VPC Endpoint for RDS from AWS VPC Console.
The overall gist of this demo is to connect the Private RDS instance from the private EC2 instance and perform the necessary RDS API actions without going to the internet (public network).
Technical blog coming soon (onecloudhelper.com)........
Пікірлер: 9
Thanks for the video
Gratitude to you for posting this outstanding Tutorial on VPC endpoints. much appreciated !!. you must be a very nice person to spend your own time and educating others with your know-hows. Thank you again !! Mathew. from Colorado
@onecloudhelper
10 ай бұрын
Thankyou for your kind words. I always try to help others with the knowledge that I have.
Great video, thank you, but instead of creating an IAM user with access and secret keys, you should create an IAM role and attach the role to your ec2 instances for best practice.
@onecloudhelper
Жыл бұрын
exactly
nice one, please do video on private link also.
@onecloudhelper
2 жыл бұрын
Thank you, surely will add that to the playlist soon
Not exactly that helpful. Yes you have created the things you said you were going to create but you didn't demonstrate any of it working together. Can I suggest * VPC A has 1x public server + 1x private server * VPC B has the RDS (mysql) instance Most importantly at some point in the video you log into the private server in VPC-A and connect (via the VPC endpoint) to the RDS instance in VPC B.
@onecloudhelper
Жыл бұрын
Thank you for pointing this out. Yes, I missed giving the VPC parameter in the command to create the RDS server in the custom VPC and it created the RDS in the default VPC. Although we were able to trigger the command privately to create the RDS server using the VPC endpoint successfully.