1- Configure on-premise firewall to allow outbound traffic from on-premise network to the public IP address of EC2 instance where the website is hosted. 2- Security Groups: In AWS, configure the security group of EC2 instance to allow incoming traffic only from the IP address range of on-premise network. 3- VPN: For additional security, establish a VPN connection between on-premise network and AWS VPC , i won't go with direct access coz based on my understanding , it was not designed for this case study
Rather than using VPN coz of it's limitation for the traffic bandwidth, i will prefer to use SSL/TLS , where it should be generated on premises and copy to aws ec2 then on the database client connection , i will use that cert + on premise IP address, PLEASE RATE THIS ANSWER OUT OF 10
![Luigi Mangione pleads not guilty [RAW]](/img/n.gif)
Add public IPs of the on prem users in the inbound rules of security group and attach it to the instance
I hope this was the answer he was looking for
Endpoints to connect ec2 with s3 to bypass going over the internet..
Direct Connect can be configures between on prem and AWS to create a privateand reliable connection between both the envs
Apart from this i would make changes in security group rules and subnets to disable any comms to internet 😅
Gateway endpoint for s3 and dynamodb for privately connection without internet
1- Configure on-premise firewall to allow outbound traffic from on-premise network to the public IP address of EC2 instance where the website is hosted. 2- Security Groups: In AWS, configure the security group of EC2 instance to allow incoming traffic only from the IP address range of on-premise network. 3- VPN: For additional security, establish a VPN connection between on-premise network and AWS VPC , i won't go with direct access coz based on my understanding , it was not designed for this case study
Rather than using VPN coz of it's limitation for the traffic bandwidth, i will prefer to use SSL/TLS , where it should be generated on premises and copy to aws ec2 then on the database client connection , i will use that cert + on premise IP address, PLEASE RATE THIS ANSWER OUT OF 10
This is really helpful. If possible can you post time stamps for all questions?
how can i reach out you
"Nacl level" we can
👍
Transit Gateway
i am also planning to interview to you
reach on whatsapp
we can use vpn
yes, we cango towards VPN, direct connect sort of options depending pon which question you are referring to
@@DevOps-Cloud for cloud to onprime servers access through vpn we ca do
nice
VPC peering
no
Firewall rules
not really..