App Runner connection to s3

Question

I have deployed my backend API to App Runner. I want this API to be able to read and write to an s3 bucket that I have, but I consistently get timeout errors when performing this operation. I have written python code to read and write from s3 using the boto3 library and locally this works using my own credentials. However when I deploy my API to App Runner the request times out. I have added a bucket policy to allow the App Runner Instance role to read and write, and I have added read / write permissions to the App Runner Instance role. What can I do to resolve this?

Thanks!

Answer

Hi,

Because of the timeout error, I'd recommend you to check the Security Groups attached to your App Runner instances if it authorizes outbound connections with HTTP/HTTPS ports.

Thanks

Answer

I had the same problem. I fixed it by creating an S3 VPCEndpoint, like this in CloudFormation:
```
S3VpcEndpoint:
    # We need this VPCE type=Gateway so App Runner can reach S3.
    # I'm surprised I need this, as I thought App Runner didn't operate in my VPC
    Type: AWS::EC2::VPCEndpoint
    Properties:
      RouteTableIds:
        - !Ref PublicRouteTable
      ServiceName: !Sub "com.amazonaws.${AWS::Region}.s3"
      VpcId: !Ref VPC
```

App Runner connection to s3

Relevant content