Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Multitenant Subnet Resources

VPC

Namecornell-shared-vpc

Subnets

There is one private Subnet for each AZ.

Name
cit:Name
cornell-shared-vpc/private-use1-azNIdentifies the subnet as belonging to the cornell-shared-vpc and further in which AZ it resides. Note the use of AZ IDs (which are consistent across accounts) not AZ names (which are not consistent across accounts).
cit:nat-gateway-public-ipv4-addressvaries

This is the public IP address that is attached to the NAT Gateway servicing this private subnet. 

This Public IP address will remain unchanged for the life of the subnet.

cit:subnet-typeprivate-mulitenantIdentifies the subnet as belonging to the Multitenant Subnets offering.

Route Tables

There is one Route Table for each AZ.

Name
cit:name
cornell-shared-vpc/private-use1-azNIdentifies the route table as belonging to the cornell-shared-vpc and further the AZ which it serves. Note the use of AZ IDs (which are consistent across accounts) not AZ names (which are not consistent across accounts).
cit:az-iduse1-azNAZ served by the route table.

Network ACLs

A single Network ACL serves all the subnets.

Name
cit:name
cornell-shared-vpc/baselineIdentifies the Network ACL as the Cornell baseline NACL. See Baseline AWS Network ACL.


What You Won't See

NAT Gateways

The NAT Gateways used by the Shared VPC offerings are not visible from customer AWS accounts. However, the Route Tables that are visible do properly show which NAT Gateway they use. Due to this lack of visibility, we have provided tagging on private subnets that shows the public IP address for the NAT Gateway used by that subnet. Traffic to the internet from a subnet will appear to be coming from that IP address.

These are the the NAT Gateway public IP addresses used by the Shared VPC offerings. These will remain fixed.

Availability Zone

NAT Gateway

Public IP Address

use1-az175.101.192.203
use1-az234.230.123.26
use1-az354.205.225.30
use1-az435.173.86.238
use1-az544.211.111.35
use1-az618.210.42.171

References