- Newest
- Most votes
- Most comments
To establish proper communication between your Lightsail instance and resources in your default VPC through VPC peering, you need to configure security groups correctly.
For allowing port 80 traffic between your Lightsail instance and resources in your default VPC:
-
First, ensure VPC peering is properly enabled by going to the Lightsail console, selecting "Account" from the top navigation menu, choosing the "Advanced" tab, and enabling VPC peering for your region.
-
For the security group configuration on the default VPC side (where your EC2 or other resources are located):
- Open the security group associated with your EC2 instance or ALB
- Add an inbound rule that allows HTTP traffic (port 80)
- For the source, specify the CIDR range of your Lightsail VPC or the specific private IP address of your Lightsail instance
- On the Lightsail side, you'll need to configure the firewall:
- Go to your Lightsail instance's management page
- Select the "Networking" tab
- Add a firewall rule to allow HTTP traffic (port 80) from the CIDR range of your default VPC
Remember that VPC peering in Lightsail can only be established with the default VPC in the same AWS account and region. Also, ensure that the CIDR blocks of the Lightsail VPC and your default VPC don't overlap, as this is a prerequisite for successful VPC peering.
After configuring the security groups and firewall rules, traffic on port 80 should be able to flow between your Lightsail instance and resources in your default VPC through the VPC peering connection.
Sources
peering between a Lightsail instance and my default VPC | AWS re:Post
Community | Connecting Lightsail to AWS Services
Connect Lightsail resources to AWS services using VPC peering - Amazon Lightsail
Relevant content
- asked 9 months ago
- asked 3 years ago
- AWS OFFICIALUpdated a year ago

Hi Andy, you'll need to update your Lightsail instance firewall to restrict port 80 access to only the CIDR range of your default VPC that's peered with Lightsail. Since you're placing your Lightsail instance behind an ALB, you should only allow traffic originating from the ALB itself. Thanks.