How can I access resources in a peered VPC over Client VPN?

Resolution

Before you begin:

• Create or identify a VPC with at least one subnet. Find the subnet in the VPC that you plan to associate with the Client VPN endpoint, and then note its IPv4 CIDR ranges. For more information, see Subnets for your VPC.
• Identify a suitable CIDR range for the client IP addresses that doesn't overlap with the VPC CIDR.
• Review the limitations and rules for Client VPN endpoints.

To provide access to resources in a peered VPC:

1. Create a VPC peering connection between the VPCs.
2. Test the VPC peering connection. Confirm that instances in both VPCs can communicate as if they're in the same network.
3. Create a Client VPN endpoint in the same Region as the target VPC.
4. Associate the subnet that you previously identified with the Client VPN endpoint that you created in step 3.
5. Add an authorization rule to give clients access to the target VPC. For Destination network to enable, enter the IPv4 CIDR range of the VPC.
6. Add an authorization rule to give clients access to the peered VPC. For Destination network, enter the IPv4 CIDR range of the peered VPC.
7. Add an endpoint route to direct traffic to the peered VPC. For Route destination, enter the IPv4 CIDR range of the peered VPC. For Target VPC Subnet ID, select the subnet that you associated with the Client VPN endpoint.
8. Add a rule to the security groups for your resources in both VPCs. Use this rule to allow traffic from the security group that you applied to the subnet association in step 4. Then, confirm that the network access control lists (ACLs) in both VPCs allow traffic between the target VPC and the peered VPC.