MWAA Private Airflow UI Web server can't be accessed through ALB

Question

I trying to setup an MWAA environment inside of a private subnet and using an internal ALB to allow users to access the VPC endpoint that is tied to the web server IP addresses in the environment's subnets.

But, the MWAA UI through the console link can't be reached. And when accessing that I am sent sent to a page that says The site can't be reached and the URL has a syntax similar to (MWAA WEB TOKEN is created)
https://####-vpce.c71.us-east-1.airflow.amazonaws.com/aws_mwaa/aws-console-sso?login=true

If I replace the beginning of the URL with below I am able to get to the proper MWAA webpage.
https:///aws_mwaa/aws-console-sso?login=true

I am not sure exactly where the issue is but it seems to be that I am not being re-directed to where I need to go.

Answer

From error message it looks like Private DNS name for Airflow UI is not resolvable  ...If you are using custom name server Please make sure Private DNS name (####-vpce.c71.us-east-1.airflow.amazonaws.com) is resolvable from custom name server.

If above is not a case  then please create a support case with environment details and your detail use-case that helps us to provide more environment and network information for further troubleshooting.

MWAA Private Airflow UI Web server can't be accessed through ALB

Relevant content