What is the com.amazonaws.vpce Endpoint service?

0

In my VPC -> Endpoints page, I have an Endpoint a with a service name that starts with "com.amazonaws.vpce...". It's in 2 of my subnets, and I don't remember creating it. I also can't find much information about the "com.amazonaws.vpce." service, so I don't know what it is for, and I'm afraid to remove it.

Is this an automatically-created Endpoint that I need to leave up? How can I determine what it is used for?

amoffat
feita há 2 anos10038 visualizações
2 Respostas
1
Resposta aceita

I think I've figured it out.

It appears to be an aws-generated Endpoint for my RDS serverless instance. I was able to determine this from 2 things: 1) the network monitoring of the endpoint correlated to my RDS network traffic, and 2) the security groups attached to the network interfaces attached to the endpoint both had rules that were associated with my RDS instance. Another hint was that RDS requires a minimum of 2 availability zones (for Multi-AZ), which is why there were exactly 2 subnets in this Endpoint.

I was able to confirm this by logging onto an EC2 instance in the VPC, and running nslookup against my RDS instance's private DNS name. It had a CNAME of the Endpoint, and the A record IPs associated with the CNAME were the same IPs listed in the Endpoint's subnet listing. Mystery solved, and good thing I didn't delete this.

amoffat
respondido há 2 anos
0

Head into the VPC console and click on "Endpoints". In there you'll see the endpoints that have been deployed in your VPC. The name you've given isn't too helpful - it's the last part which determines which service the endpoint has been created for.

profile pictureAWS
ESPECIALISTA
respondido há 2 anos
  • Hi, thanks for the quick response. The full service name is (redacted, not sure if necessary): "com.amazonaws.vpce.us-west-2.vpce-svc-*************", with the asterisks appearing to be a random hash.

    FWIW, the network traffic on the "Monitoring" tab of the endpoint seems directly tied to the network traffic of a serverless RDS instance. Does this give a clue as to what the endpoint is for?

Você não está conectado. Fazer login para postar uma resposta.

Uma boa resposta responde claramente à pergunta, dá feedback construtivo e incentiva o crescimento profissional de quem perguntou.

Diretrizes para responder a perguntas