Accessing private subnets

The resources in public subnets can be accessed by using the public IP and enabling the security group to receive connections. For private subnets, you have at least three ways to do this, as follows:

  • Jump on a bastion host in one public subnet, and, from there, reach the private resources.
  • Use site-to-site VPNs from the AWS VPN service, https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/vpn-connections.html, to the physical router/s in your office. You can connect two routers, for redundancy. 
  • Place a virtual VPN software in an EC2 machine and connect your device to it. There are countless solutions that do this, and many are in the AWS Marketplace, ready to be used in exchange for a monthly fee. 

The preferred ...

Get Effective DevOps with AWS - Second Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.