By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

Allow communication between EC2 instances running under different AWS Accounts

0

Hello,

I am trying to setup SSO between an EC2 instance running Gitlab and an EC2 instance with Active Directory following this documentation : "https://docs.gitlab.com/ee/ci/cloud_services/aws/". I have tried to add our Gitlab address in IAM Identity Providers but I have this message "could not connect to openid configuration of provider".

The issue, I think, is that our Active Directory EC2 instance is running under a different account than our Gitlab EC2 instance. Also, our Gitlab EC2 instance is registered in a private zone in Route 53 , under this different account.

Do you know how we can allow communication between EC2 instances running under different account ?

Rémi

Topics
Security, Identity, & ComplianceComputeManagement & Governance
Tags
AWS Identity and Access ManagementAmazon EC2AWS Account Management
Language
English
rePost-User-4036393
asked a year ago378 views
1 Answer
1

I think that the key here is that you're using a private zone in Route 53 - SSO requires that the identity provider be public and that means being publicly resolvable and having a publicly accessible endpoint.

As far as different accounts go: Most networking components in AWS are account-agnostic once connectivity is established between them. For private networks that means things like VPC Peering, Transit Gateway and other mechanisms. For publicly accessible services accounts don't matter at all.

profile pictureAWS
EXPERT
Brettski-AWS
answered a year ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content