Help us improve the AWS re:Post Knowledge Center by sharing your feedback in a brief survey. Your input can influence how we create and update our content to better support your AWS journey.
AWS SDK Calls to Cognito/Cloudfront From VPC without Internet Connection
We have a client which requires all of the resources are deployed within a VPC. If possible, service-to-service comms should not be happening via the IG/NAT gateways, but via VPC endpoints.
For the majority of the system, it was fine. But then I reached Cognito and Cloudfront. In the app code, there are a couple of AWS SDK calls that interact with APIs of these services.
So, naturally, since these services do not support VPC endpoints, I guess the IG/NAT gateway option is my only option here?
Thank you!
- Topics
- Management & GovernanceNetworking & Content DeliverySecurity, Identity, & ComplianceAWS Well-Architected Framework
- Language
- English
- Newest
- Most votes
- Most comments
Correct, Neither Cognito nor Cloudfront support VPC endpoint and Private Link, thus you have to go via Internet.
AWS services that integrate with AWS PrivateLink: https://docs.aws.amazon.com/vpc/latest/privatelink/aws-services-privatelink-support.html
Hope it clarifies.
Relevant content
- AWS OFFICIALUpdated 3 years ago
- AWS OFFICIALUpdated 4 years ago
