vpc endpoints into AWS

 VPC END Points :


AWS Interview Questions:


1).VPC endpoints ? types of vpc endpoints?

what is vpc endpoints:

if your ec2 server is in public subnets 

we can attach the IAm role .using this role we connect the

other aws services.

if your ec2 server and database is in private subnets ,

we can use the nat gateway and nat instances , we can connect to the other aws services 

vpc endpoints :


all resources are put into privately 


two types of end points:


interface endpoints

using the interface endpoints we can connect other aws resources 

gateway endpoints

using the gateway endpoints we can connect the s3 service and dynamo db services.


vpc endpoints:


your database into private subnets , would you like to store the logs ,would you like to store the backups into 

s3 buckets which is the internet ?




How does database into private subnet ,how to talk to the  internet related the aws resources?

using the  vpc endpoints


inthis case we don't need to require for natgatway or internet gateway and nat instance 

its provides private network . 


if you want to establish the  network connectivity from 

privately to talk the internet related aws services


but entire traffic should be in private in nature..



2).How to create the vpc endpoint into aws?


first we need to create the network setup for this:


first we need to create the vpc 


create two subnets


one is two public subnets 


other one is two private subnets


next we need to setup the internet gateway


next this internet gateway is attached to the vpc


crate two route table over here 


we need to attach the igw for public subnets


here we are going to attach any internet gateway to private 


subnets




nest we need to attaché with subnets with route table which we are created .


setup ec2 instances 


first launch the two ec2 servers


first ec2 instances launch's=es with the public subnets


second ec2 instances launch's with the private subnets


forest login into the public subnet ec2 instances from their we can login into the private subnet ec2 instances



because private ec2 instances doesn't have the internet 

access



next copy to the [private key pair and paste  into publics subnets ec2 server


next change the mode of this file


next setup the vpc into s3 service


next login into the private subnet ec2 server:


aws configure


it will ask secret key

and access key



next we are going to craete the vpc endpoints


name

service category


s3 service -here we can mention it .what kind of 


services u are going to define in inside /



choose specific service 


choose s3 only


choose vpc's endpoints

select vpc's 


choose route table privately


craete dag 


create the vpc endpoints 


so in this way we can create the vpc endpoints


--------------------------------





if we have vpc in private subnet , within the resources if its taled to internet related service like as the 


dynamo db and s3 service , so its called as the vpc endpoints into aws environments


to ensure the entire traffic is private 


comes in tow flavor


gateway 


interface



interface s3 service also there( connect two vpc ).both vpc's are talk to the se

gateway s3 service also there(here its nor there options 


vpc endpoints having some policy :


networks level authorizations policy ..








Comments

Popular posts from this blog

Linux interview Questions :

SQL Interview Questions: