New EC2 instance based on another EC2 AMI is not working properly

0

I have an ec2 instance which is serving backend-logic for my application and it is not part of a CloudFormation stack. I wanted to create a new stack with new VPC and Subnet and Security group and Autoscaling group which launch an ec2 instance based on the AMI of the former ec2 instance i mentioned before. I created the CDK app and deployed it. But all the requests to any endpoint is failing with Error: connect ECONNREFUSED I don't know how to troubleshoot this issue., or how to identify where the issue is. The new ec2 instance which is launched from the CDK app is based on the AMI of the former ec2 instance. what might be wrong ?

Troubleshooting I have done :

1- Security Group Rules: I ensured that the security group attached to my EC2 instance allows inbound traffic for HTTP traffic on port 80.

2- Ensured that the subnet in which my ec2 instance resides has a route to an internet gateway. ( ec2 instance is in a public subnet) and also pinged a sample URL and received a response.

I am using the ec2.GenericLinuxImage API to create the new ec2 instance

 const asg= new autoscaling.AutoScalingGroup(this,'autoscaling-cdk',{
      vpc,
      associatePublicIpAddress:true,
      instanceType:ec2.InstanceType.of(ec2.InstanceClass.T3A,ec2.InstanceSize.SMALL),
      keyName:.....................,
      machineImage:new ec2.GenericLinuxImage({'region':'ami-ID'}),
      securityGroup,
      vpcSubnets:{subnetType:ec2.SubnetType.PUBLIC},
      desiredCapacity:......
    })

Note :

1- the ec2 instance launched from CDK code is launched in a region that is different from the source ec2 which the AMI is based on , and there is an RDS instance involved which happens to be in the same region & VPC of the Source Ec2 instance which the AMI is based on. Do I need to create a VPC Peering taking into consideration that at time of testing the new ec2 instance I was allowing all inbound traffic in the RDS instance.

Mahmoud
已提問 1 個月前檢視次數 188 次
2 個答案
2
已接受的答案

Yes, if your new EC2 instance launched from the CDK code is in a different region than the source EC2 instance and the RDS instance, you will need to establish a VPC Peering connection between the two VPCs to allow communication between the new EC2 instance and the RDS instance.

VPC Peering is a networking connection that allows you to route traffic between two VPCs, even if they are in different regions or different AWS accounts. This way, your new EC2 instance in the new region can communicate with the RDS instance in the original region and VPC.

Useful Source:

profile picture
專家
已回答 1 個月前
profile picture
專家
已審閱 1 個月前
0

Thanks So Much it worked

Mahmoud
已回答 1 個月前

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南