Private API Gateway static IP

0

Hi there,

May I know if the private API Gateway has static ip or dynamic ip?

2개 답변
2

Private API Gateway endpoints cannot be invoked using IP addresses.

As mentioned in this blog post - https://aws.amazon.com/blogs/compute/integrating-amazon-api-gateway-private-endpoints-with-on-premises-networks/

Note: Call the DNS endpoint of the API Gateway for the HTTPS certificate to work. You cannot call the IP address of the endpoint directly.

For Public API Gateway endpoints, it is possible to get static IP addresses by using AWS Global Accelerator, as explained in this blog post - https://aws.amazon.com/blogs/networking-and-content-delivery/accessing-an-aws-api-gateway-via-static-ip-addresses-provided-by-aws-global-accelerator/

profile pictureAWS
전문가
답변함 2년 전
1

Private APIs are accessed via VPC Endpoints (powered by PrivateLink). We create ENIs in the relevant subnets and their IP will not change, unless you delete the endpoint and recreate it.

That being said, Your client will not be able to invoke the API using IPs, unless they ignore the TLS certificate that is sent from API Gateway.

Why do you need static IPs for your APIs?

profile pictureAWS
전문가
Uri
답변함 2년 전
  • Hi Uri, because our security team want to whitelist the IP from API Gateway and doesn't want to whitelist whole subnet. Thanks for your explanation

  • So you are trying to access the API from your on-prem?

  • Yes, we access API from on-perm via direct connect / VPN

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인