By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

AWS SDK Calls to Cognito/Cloudfront From VPC without Internet Connection

0

We have a client which requires all of the resources are deployed within a VPC. If possible, service-to-service comms should not be happening via the IG/NAT gateways, but via VPC endpoints.

For the majority of the system, it was fine. But then I reached Cognito and Cloudfront. In the app code, there are a couple of AWS SDK calls that interact with APIs of these services.

So, naturally, since these services do not support VPC endpoints, I guess the IG/NAT gateway option is my only option here?

Thank you!

Topics
Networking & Content DeliverySecurity, Identity, & ComplianceAWS Well-Architected FrameworkManagement & Governance
Tags
Amazon VPCAmazon CognitoNetworking & Content DeliverySecurityAWS Account Management
Language
English
profile picture
Adrian
asked a year ago357 views
1 Answer
0

Correct, Neither Cognito nor Cloudfront support VPC endpoint and Private Link, thus you have to go via Internet.

AWS services that integrate with AWS PrivateLink: https://docs.aws.amazon.com/vpc/latest/privatelink/aws-services-privatelink-support.html

Hope it clarifies.

profile picture
EXPERT
Antonio_Lagrotteria
answered a year ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content