Information Technology
Hands on Training icon
Hands On Training
Hands on Training icon

Access S3 from Private EC2 instance using VPC Endpoint

Course Cover
compare button icon

Course Features

icon

Duration

90 minutes

icon

Delivery Method

Online

icon

Available on

Lifetime Access

icon

Accessibility

Desktop, Laptop

icon

Language

English

icon

Subtitles

English

icon

Level

Advanced

icon

Teaching Type

Self Paced

icon

Video Content

90 minutes

Course Description

Lab Details

This lab will show you how to create an Amazon S3 endpoint and connect with EC2 Instance Private subnet.

Access to EC2 instances in a private subnet from a bastion host, or an EC2 instance within a public subnet, will allow you to access these instances.

Duration: 90 minutes

AWS Region: US East, N. Virginia us-east-1

Introduction

Bastion Instance

Bastion hosts are systems that are exposed to the internet. Bastion is the only server exposed to the internet in terms of security. It should be extremely protected from malicious attacks. Bastion hosts are also known as Jump Boxes. It's a computer that acts as a proxy server, allowing the client to connect to the remote server. It is usually located outside of the firewall. This lab uses Bastion instance as a public instance that can be used to SSH into private instances.

VPC Endpoint for S3

VPC Endpoint allows you to securely connect to your VPC and other AWS services powered via AWS PrivateLink. AWS PrivateLink allows you to access AWS services using private IP addresses. Traffic does not leave Amazon's network in this instance. VPC endpoints do not require a NAT Gateway or NAT instance. There are two types VPC endpoints available: Gateway and Interface. Gateway endpoint is the VPC endpoint for S3. It asks you for the Route table when you create a VPC Endpoint for S3. Then it adds the Prefix to the route table. Endpoint cannot modify or delete the entry in the route table.

Course Overview

projects-img

Virtual Labs

projects-img

Case Based Learning

projects-img

Post Course Interactions

projects-img

Case Studies,Hands-On Training

Skills You Will Gain

What You Will Learn

In the Main Route table, you will learn how to add an entry to the Internet (0000/0)

Learn how to create a public and private subnet

Learn how to delete AWS resources

Learn how to launch a lab environment

Learn how to validate the laboratory

This course will teach you how to configure the Public subnet in order to enable auto-assignment of public IPv4 addresses

This course will teach you how to create a Bastion host (publicly accessible EC2 instance)

This course will teach you how to create a route table for the private subnet

This course will teach you how to create and attach an Internet Gateway using a custom VPC

This course will teach you how to create security groups

This course will teach you how to list all the S3 buckets and their objects

This video will show you how to associate the private subnet with the custom route table, RT for Private subnet

This video will show you how to create a VPC

This video will show you how to create a VPC endpoint to S3 and attach it to the Route table for Private subnet

This video will show you how to create an Endpoint instance (Privately available EC2 instance)

Through Bastion host, you will be able to SSH into an Endpoint instance (Privately Accessible)

Course Cover