amplify-hosting icon indicating copy to clipboard operation
amplify-hosting copied to clipboard

VPC Access for Amplify Static Applications

Open DanielNetzeriAm opened this issue 4 years ago • 116 comments

We are using ECS to deploy ec2 instances as backend api's/microservices, all of those are inside a VPC in our QA and DEV account.

When we try to run Cypress unit tests the application makes http requests to those microservices resulting in timeout as the applications isn't part of the VPC.

a scenario for example: App Startup -> User Unauthorized -> Send Http Request to Auth Microservice -> Timeout. Tests fail.

Would be happy if there's a way to add Amplify applications into a VPC in general so we can control the access on the development environments.

DanielNetzeriAm avatar Jun 25 '20 08:06 DanielNetzeriAm

Hi @DanielNetzeriAm,

I believe we don't support hosting in VPC at the moment. I have added it to our feature backlog.

abhi7cr avatar Jun 27 '20 00:06 abhi7cr

is there an update on where this stands in terms of priority? with SPA apps testing in non-production environments becomes a challenge with not being able to deploy apps within a VPC

shivaas avatar Jul 06 '21 22:07 shivaas

Any possible solutions for this issue?

rishikanttwr avatar Nov 24 '21 10:11 rishikanttwr

Hi - is there any update to this please? It would be great to use Amplify to deploy internal applications rather than just externally facing ones. Thanks :)

kevinphillips81 avatar Mar 14 '22 16:03 kevinphillips81

Is there a timeline on when this might be coming, if not is there any support guide on how we can add amplify apps to our VPC?

vbhakta8 avatar Apr 06 '22 00:04 vbhakta8

+1

vleandersson avatar Aug 02 '22 14:08 vleandersson

+1

jimmymabunda avatar Aug 15 '22 11:08 jimmymabunda

+1

joaobonsegno avatar Sep 15 '22 20:09 joaobonsegno

Any news here or roadmap progress? Thx.

youwalther65 avatar Sep 21 '22 05:09 youwalther65

any news please ?

rudyjdr avatar Oct 19 '22 16:10 rudyjdr

any updates? Also, looking to have this feature

joshpopelka20 avatar Oct 25 '22 14:10 joshpopelka20

Any updates here? Blocks my use case of accessing Elasticsearch cluster inside my VPC --- big deal breaker

JonathanReiss15 avatar Feb 17 '23 02:02 JonathanReiss15

I want to +1 on this one

jhwang09 avatar Apr 20 '23 17:04 jhwang09

+1 on this issue. This is currently creating us issues as we necessarily need to open our RDS to the Internet in order to have our Next backend connect to it.

GabrieleMazzola avatar Apr 23 '23 15:04 GabrieleMazzola

+1 on this issue.

skolenkin avatar Apr 24 '23 15:04 skolenkin

+1

alumni49242 avatar May 09 '23 05:05 alumni49242

+1

jethroguce avatar May 24 '23 05:05 jethroguce

It's been nearly 3 years since this was added to the backlog. Is there legitimately no progress to report on it? It does seem pretty insane that the recommendation is to just open RDS or other resources to the public facing internet just to deploy a Next.js site. Please allow configurable VPC access via amplify.yml or some other configuration panel in the Amplify Console. The convenience of Amplify is not worth the security implications if it cannot communicate with my data sources hosted within AWS as well.

mririgoyen avatar May 31 '23 14:05 mririgoyen

^ I cant open up my database to the internet thats behind a VPC with many services containing sensitive data. As it stands, it isn't worth it in the slightest. This is a dealbreaker for me; I'd love to see some progress on this

leoata avatar Jun 16 '23 20:06 leoata

This would be ideal, if not I need to move a project off Amplify and into EC2 to access our VPC peering connection.

bigboypantson avatar Jul 03 '23 10:07 bigboypantson

+1 on the above. Can we get a status update please? This is also a dealbreaker for my use-case.

IvanVeridian avatar Jul 10 '23 05:07 IvanVeridian

+1 On all of the above. Not even just from a security standpoint, but in terms of ease of setup, all the "high level abstraction" that AWS Amplify adds is quickly negated by the fact that you have to go through extra hurdles just to be able to connect an ElastiCache instance for example.

georgipasta avatar Jul 20 '23 09:07 georgipasta

+1

ashokmagadum avatar Sep 17 '23 01:09 ashokmagadum

+1

KindArt avatar Sep 23 '23 18:09 KindArt

+1

hyoloui avatar Oct 26 '23 06:10 hyoloui

+1

This has been three years, so is this actually on your roadmap? Amplify would be a great solution if so, otherwise this product is useless to many, especially those of us needing SOC 2 compliance since the database being open is huge gap and is not a solution for production apps.

breaker05 avatar Nov 02 '23 16:11 breaker05

+1

skilef avatar Nov 06 '23 08:11 skilef

+1

hyoloui avatar Nov 23 '23 01:11 hyoloui

+1

jitendra-koodo avatar Nov 24 '23 04:11 jitendra-koodo

+1

RigoMiranda avatar Dec 06 '23 14:12 RigoMiranda