Setting up a VPC to use with Amazon Quick Suite
Applies to: Enterprise Edition |
Intended audience: System administrators |
To set up a VPC to use with Amazon Quick Suite Enterprise edition, you need access to Amazon VPC and
Amazon EC2. You also need access to each Amazon database service that you plan to add to
Quick Suite. You can use the console, or you can use the Amazon Command Line Interface (Amazon CLI). For more
information about the CLI, see the Amazon Command Line Interface User Guide. To work
with the CLI, go to http://www.amazonaws.cn/cli/
Before you begin to set up your VPC connection in Amazon Quick Suite, make sure that you understand the components of a VPC deployment. As part of that, familiarize yourself with the VPC's subnets and security groups in relation to the destinations (databases) that you want to reach from Amazon Quick Suite. To set up a successful VPC connection, make sure that the following components work together to allow network traffic to pass between Amazon Quick Suite and your data source:
-
The Amazon VPC service
-
The subnets that your data source is using
-
The Amazon Quick Suite elastic network interfaces and the subnets they use
-
The route table
-
Inbound and outbound rules for these security groups:
-
Security group for your VPC. We recommend you create a new security group to isolate the rules on the VPC security group from the rules on the Amazon Quick Suite network interface's security group).
-
Security group attached to the Amazon Quick Suite network interface.
-
Security group attached to the database server (for each database server that you want to use).
-
-
(Optional) Amazon Route 53 Resolver inbound endpoints for private DNS resolution.
In the following topics, you can find the network components that are involved. You can also find descriptions of their roles in the network configuration of your VPC and your Amazon Quick Suite VPC connection. The network interface for Amazon Quick Suite that is automatically created during setup is called the Amazon Quick Suite network interface (QNI).
If your VPC is already completely configured, skip to the next section, Finding information to connect to a VPC.