Cannot execute private API gateway endpoint in VPC A from an application loadbalancer in VPC B although VPC Peering is done

0

Hi, I have API gateway private in VPC A and want to invoke it from an application load balancer in VPC B. I have enabled peering and added both CIDR block to the route tables as well enabled access for the security group of the lb to access the private API in its security group. Still I am not able to execute the API. What am I doing wrong? I have a resource policy where also I have enabled botht he IP of the VPC A and B.

1개 답변
0

Hi

Please refer this link for the reference https://repost.aws/knowledge-center/invoke-private-api-gateway

Check this points:

Security Group Rules:

  • Double-check the security groups involved. Ensure the ALB's security group in VPC B has inbound rules that allow traffic on the appropriate port (typically HTTPS - port 443) from the CIDR block of the subnets where the API Gateway endpoint resides in VPC A.
  • Verify the security group for the API Gateway endpoint in VPC A has outbound rules that allow traffic on the same port (443) to the CIDR block of the subnets where the ALB resides in VPC B.

VPC Endpoint Configuration:

Ensure an interface VPC endpoint is created in VPC B for API Gateway service (directs traffic within VPC)

*Additional References: *

How to invoke a private API - Amazon API Gateway: https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-private-api-test-invoke-url.html

Deploy an Amazon API Gateway API on an internal website using private endpoints and an Application Load Balancer: https://docs.aws.amazon.com/prescriptive-guidance/latest/patterns/deploy-an-amazon-api-gateway-api-on-an-internal-website-using-private-endpoints-and-an-application-load-balancer.html

profile picture
전문가
GK
답변함 한 달 전

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인