How can I verify the VPC Gateway Endpoint is used?

0

How do I verify the VPC Gateway Endpoint is being used after setup? I can run a reachability analysis between the ENI and the VPC gateway, but how do I confirm it's routing via the gateway endpoint?

gefragt vor 2 Jahren611 Aufrufe
2 Antworten
1
Akzeptierte Antwort

The easiest way to do this is to look at the CloudTrail event for each API call. If the endpoint is being used then there will be vpcEndpointId value in the event.

profile pictureAWS
EXPERTE
beantwortet vor 2 Jahren
profile pictureAWS
EXPERTE
überprüft vor 2 Jahren
  • Ah wonderful, what I was looking at was working, but instead I discovered RedShift wasn't using it probably because it doesn't have enhanced VPC enabled.

  • Depending on what you're doing; AWS services (RDS, Redshift and others) will access S3 without going through your VPC - they have other networking connections that allow them to connect to S3 independently and that's how they would work in a VPC without Internet access or a private endpoint.

0

I noticed that "vpcEndpointId" is present even for the events when no point existed. Not sure why that's there.

beantwortet vor einem Jahr

Du bist nicht angemeldet. Anmelden um eine Antwort zu veröffentlichen.

Eine gute Antwort beantwortet die Frage klar, gibt konstruktives Feedback und fördert die berufliche Weiterentwicklung des Fragenstellers.

Richtlinien für die Beantwortung von Fragen