Questions tagged with Shared VPC

I have a multi-account setup, with one account owning a shared VPC. This is shared to other accounts in a specific OU using RAM, a share policy etc. At the time that I created the shared VPC, the OU had some accounts already. They were able to successfully see the shared VPC. Since then, I added a new account to the OU. This account could not access the shared VPC, until I manually unshared and reshared the subnets. Is this intentional?lg...

is it possible for a Group of companies with independent IT infrastructure to share a VPC? This is a corporation, let's say CorporateXX, which includes Company A, B, C and D. Each company with their own IT infrastructure. They want to build a data warehouse where relevan information, from all 4 companies, will be shared for the corporate executives. Is it possible? is it a cost effective solution? of course security is the main concern.lg...

Hey, I'm considering [ VPC Sharing](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-sharing.html) for connectivity between customer accounts. While using AWS Organizations and sub-accounts as isolation boundaries, I need to communicate privately between customer account VPCs and the main VPC. I believe I could do this with VPC sharing by creating a subnet per customer. However, I need to know if this solution would scale given the following service quotas: * Subnets per VPC - 200 (Adjustable) * VPC Sharing - Participant accounts per VPC - 100 (Adjustable) Would I be able to scale to 1,000s or 10,000s of customers with this architecture?lg...

Suppose we used BYOIP in primary region and if we have to use the same IP's in DR region while primary region down. Is it possible to deprovision the BYOIP subnet from primary region and reprovision in DR region.lg...

Hi, We have a strict restriction to use only shared vpc subnets to create resources and AWS RabbitMQ doesn't support shared vpc as of now. What is the possible solution ? just wanted to understand as why rabbitmq doesn't support shared vpc as other statefull databases support it. Is there any roadmap to enable it in future.lg...

I want to start existing and ongoing replication from source MongoDB to destination RDS Postgres. All the security network is done and successful. 1. RDS VPC and DMS VPC are connected using VPC peering, **target endpoint test connection status is successful** 2. DMS VPC IP is added in another AWS account MongoDB server, **source endpoint test connection status is successful** 3. In the Endpoint schemas section both database schemas are visible. Created a DMS migration task to start the migration of one document of MongoDB to Postgres Database. * Premigration assessments were successful. * Empty scheme with the MongoDB schema name got created in PostgresDB. * The table awsdms_apply_execution is also empty in Postgres DB. But the task shows running with error and error, and cloud watch logs also show no error.lg...

I feel I have followed the instructions on the cloudquest game very well but I am having issues. Can someone walk me through it or can we do a zoom link or something so I can show what is going on and can someone help me? I need help establishing a VPC peering connection. I established it but when I run the ping it will not respond.lg...

I need to restrict access to a Cloudfront distribution to clientVPN users only. Idea I had was to connect them to a VPC into a NAT, and add the IP address of the NAT in the approved Ip access list of the Cloudfront, so that only them can access. Issue is that I need to put a route for this NAT into the Clientvpn - otherwise they will route it through the split tunnel through their internet. I could not find what is the best way to achieve. that last bit without having to disable split tunnel. We are using Transit Gateway and a shared networking account.lg...

I'd like to be able to configure private link across regions as a provider only supports it's product in a region they we don't have our workloads in. Currently this is not available ( Feb 2022 ). Is the current best practice to setup the private link in the same region as the provider then use VPC peering to connect back to my application in the "other region"?lg...