Using AppConfig with a Lambda in a private VPC with an Endpoint


I'm using AppConfig with Lambda successfully for Lambdas running outside a VPC (using the AppConfig Lambda extension). I'd like to also use AppConfig on Lambdas that need to run in a VPC.

Lambdas running in VPCs are able to use many AWS services by making use of VPC endpoints. There doesn't appear to be an AppConfig VPC endpoint which is disappointing (I've tried using an SSM endpoint which - as expected - doesn't work for AppConfig).

It appears the only option would be to have the Lambda access AppConfig across the internet using a NAT gateway. This feels like overkill to access an AWS service. Am I missing a way for a Lambda running in a VPC to privately access AppConfig or is an endpoint likely to be introduced for this service?


2 Answers

app config doesn't have a vpc endpoint option as of now. Connection is only supported by internet.

answered a year ago

As of December 6 2023, you can now use AWS PrivateLink to create a private connection between your VPC and AWS AppConfig. You can access AWS AppConfig as if it were in your VPC, without the use of an internet gateway, NAT device, VPN connection, or AWS Direct Connect connection. Instances in your VPC don't need public IP addresses to access AWS AppConfig.

Refer to the release notes -

answered 25 days ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions