Reach third-party resources in an aws account that only provides a vpc peer connection from our data center.

0

Hello,

I have this scenario:

  • An AWS account with a vpn connection to our data center using a private gateway.
  • A third-party account that hosts their service in aws but only provides a vpc peer connection.
  • Our AWS account has connectivity with the third-party resources using the peer vpc configuration.

My question is, is there a way for the servers in our data center to reach the resources in the third-party account using our AWS account as some sort of middleman? What services should we look into?

Our data center provider also has direct connect capability if needed but it's located in a different region.

Regards.

Unique
已提問 10 個月前檢視次數 224 次
1 個回答
0

Hello @Unique,

It's crucial to be mindful of the limitations that come with **VPC Peering **when endeavoring to access resources beyond the peered VPC. Here's a rundown of key considerations when having Peering between VPCA and VPCB:

  • If VPC A has an internet gateway, resources in VPC B won't be able to utilize it to gain access to the internet.
  • Should VPC A rely on a NAT device for internet access within its subnets, resources in VPC B won't have access through this NAT device.
  • Any VPN connection between VPC A and a corporate network won't be accessible for resources in VPC B to communicate with the corporate network.
  • Similarly, if VPC A has an AWS Direct Connect connection to a corporate network, resources in VPC B won't be able to use it for communication.
  • If VPC A has a gateway endpoint specifically configured for private subnets to access Amazon S3, resources in VPC B won't be able to leverage it for Amazon S3 access.

In view of these limitations, you may want to consider implementing a **Proxy Server **within your account's VPC. This can change the source IP address, making the traffic appear as if it's initiated from your local VPC. Alternatively, you could explore replacing VPC Peering with a **Transit Gateway **for a more flexible and efficient network communication.

Best regards.

AWS
Shmosa
已回答 9 個月前

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南