Some Interesting IP Address and VPC Announcements from AWS
~~
How are you currently managing your IP ranges and ASNs?
~~
#AWS #VPC #IP #NetworkSecurity

https://medium.com/cloud-security/some-interesting-ip-address-and-vpc-announcements-from-aws-7566beb56179

Working in #AWS, you may find you need to move your #lambdas out of the default #VPC so they can talk to other services, eg. RDS. Granting #internet access to lambdas in the non-default VPC isn't trivial...

Here's a #CloudFormation gist with a working solution...

https://gist.github.com/instantiator/fc433a98bb6a58234602d67a69b3cda7

Troubleshooting #AWS #VPC #Endpoints
~~
ACM.318 When you cannot access AWS Services or your response time slows down after deploying VPC endpoints and how to fix it
~~
Not sure this is how it’s supposed to work. But this fixes it.

https://medium.com/cloud-security/troubleshooting-vpc-endpoints-abf4cf05f1ef

Cannot Restrict Lambda Actions Based on Private IP Addresses in a Service Control Policy

~~
ACM.313 #IPAddress and #NotIPAddress conditions don’t work for Lambda on Private IP addresses in an #AWS #SCP when using a #VPC Endpoint
~~

https://medium.com/cloud-security/aws-ip-conditions-in-an-scp-not-working-with-private-ip-ranges-and-lambda-vpc-endpoint-22ff7a7647ca

Restricting the Ability to Invoke a Lambda Function to a Private Network
~~
ACM.311 When configuring a VPC is not enough
~~
#Lambda #Private #Network #VPC #AWS #Cloud #Security

https://medium.com/cloud-security/restricting-the-ability-to-invoke-a-lambda-function-to-a-private-network-775461f53fa8

Troubleshooting Lambda Networking
~~
ACM.308 Validating private network access and troubleshooting issues access from a private VPC through a NAT
~~
#lambda #networking #vpc #troubleshooting #aws #cloud #security

https://medium.com/cloud-security/troubleshooting-lambda-networking-c6a957746407

VPC with a #NAT and a #VPC #Endpoint Deployed With #CloudFormation
~~
ACM.276 Allow a #Lambda function in a private network to access #GitHub via a NAT and #AWS #CodeCommit via a VPC #Endpoint
~~
by Teri Radichel | July 31, 2023
#Network #Cloud #Security

https://medium.com/cloud-security/vpc-and-nat-and-a-vpcendpoint-deployed-with-cloudformation-229870a3d008

Deploy a Public and Private Subnet in an #AWS #VPC
~~~
Not simple. And not done. I’ll check in the code when I’m done with the sub-series on deploying a static website in S3.
~~~
by Teri Radichel | July 28, 2023
#cloudsecurity #networksecurity

https://medium.com/cloud-security/deploy-a-public-and-private-subnet-in-an-aws-vpc-41b1b5dd6364

Architecture with Transit Gateway in an AWS Organization ~ In last few posts in this series I’ve been pondering options for a #Lambda function in a #VPC that needs to reach the Internet via a #NAT and related concerns.
~~~
by Teri Radichel | Jul 26, 2023

https://medium.com/cloud-security/architecture-with-transit-gateway-in-an-aws-organization-ee1c218ed469