Restoring Private Connectivity Between AWS VPCs

Table of Contents

1. Challenge

   Inspect the VPCs and confirm peering relationships

   1. Review the cidr ranges assigned to the client VPC and app VPC.
   2. Confirm the VPC cidr ranges do not overlap.
   3. Identify the client and application subnets involved in the intended connectviity design.
2. Challenge

   Establish the VPC peering relationship

   1. Create the VPC peering request from the client VPC.
   2. Accept the VPC peering request inside the app VPC.
   3. Confirm the VPC peering connection reaches the active state.
3. Challenge

   Configure bidirectional routes for peered subnets

   1. Identify the route tables associated with the client and application subnets.
   2. Add the required routes in the client subnet(s) route table.
   3. Add the required route in the application subnet route table.
   4. Add the required route in the database subnet route table
4. Challenge

   Configure private DNS resolution across the VPC peering connection

   1. Verify the VPCs DNS settings.
   2. Configure required VPC peering DNS resolution settings.
5. Challenge

   Validate authorized and unauthorized connectivity

   1. Confirm successful ip and DNS connectivity from client1 to application.
   2. Confirm unsucessful ip connectivity from client1 to database
   3. Confirm successful ip and DNS connectivity from client2 to database
   4. Confirm unsucessful ip connectivity from client2 to application