~/ nmadiraju.com Amazon EKS · Amazon VPC Lattice
arrow_back Back to nmadiraju
Visual Walkthrough · Amazon EKS networking

How Amazon VPC Lattice Works with Amazon EKS

Follow checkout's call to inventory in another VPC and account through a VPC Lattice service network, then check yourself with 8 questions.

1Visual Walkthrough

Amazon VPC Lattice on EKS: checkout in one account calls inventory in another through a shared service network Left, account 111122223333 with VPC A 10.0.0.0/16: cluster shop with the checkout Pod, a VPC association, the Route 53 VPC Resolver and IAM role checkout-lattice. Middle, Amazon VPC Lattice in us-east-1: service network shop-net holding service inventory-store and its IP target group, and an AWS RAM share. Right, account 222233334444 with VPC B 10.0.0.0/16: cluster warehouse with the AWS Gateway API Controller, Gateway shop-net, HTTPRoute inventory, an IAMAuthPolicy and three inventory Pods. The walkthrough shows the overlap, the controller building the service, the RAM share and association, a 403 fixed by SigV4 signing, and a security group fixed with the managed prefix list. ACCOUNT 111122223333 VPC A 10.0.0.0/16 EKS CLUSTER shop checkout Pod · ns shop 10.0.12.34 GET /stock/sku-42 VPC association Route 53 VPC Resolver IAM role checkout-lattice AMAZON VPC LATTICE · us-east-1 SERVICE NETWORK shop-net Service inventory-store inventory-store-0a1b2c3d.7e8f9a .vpc-lattice-svcs.us-east-1.on.aws listener HTTP :80 → target group Target group · type IP VPC B · port 8080 · HTTP AWS RAM resource share ACCOUNT 222233334444 VPC B 10.0.0.0/16 EKS CLUSTER warehouse Gateway API Controller Gateway shop-net class amazon-vpc-lattice HTTPRoute inventory ns store · / → inventory:8080 IAMAuthPolicy inventory Pods ×3 ns store · port 8080

    2Quiz to check understanding

    Check yourself