Creating a VPC Endpoint
Preventing the exposure of your traffic outside your VPC and its associated services entails creating endpoints to serve as authorized traffic destinations. This effectively creates an elastic network interface within your subnet where each endpoint's private IP address serves as entry points for traffic bound to a specific service, such as Dremio. For additional information, see VPC endpoints.
To create a VPC endpoint for Dremio, perform the following steps:
Go to the AWS Management Console and sign in with your credentials.
Navigate to Services > Networking & Content Delivery > VPC.
Select Endpoints from the side navigation bar.
Click the Create endpoint button in the top right.
On the Create endpoint page, set the following:
a. (Optional) For Name tag, enter a name for your endpoint.
b. Under the Service category section, click Find service by name.
c. Enter the Service name, enter the service name that matches your AWS region, as provided in the Regional Service Namestable below.
d. Click the Verify service button to ensure the service name is found. If you encounter an issue with the connection, check to ensure the service name is correct and make sure your AWS console is in the matching region as the Service name (e.g., US West (Oregon) for
e. For Subnets, check the box next to your availability zone, select the desired subnets to support with this endpoint, and select your IP address type. It is okay if all subnets are selected as over-provisioning as it won't prevent access--otherwise select the subnet(s) being used to connect to Dremio.
f. Disable Enable DNS name, unless your organization is specifically configured to use an AWS DNS Private Hosted Zone. If you are unsure, we recommend disabling "Enable DNS name".
g. For Security group, check the box next to the security group to select.
Click the Create endpoint button.
Save the VPC endpoint ID in a location that you can retrieve it from after your VPC is set up.
Obtaining the Endpoint ID
Once the endpoint has been created, you'll need to obtain the Endpoint ID, which is used within Dremio Cloud service to fully configure the route traffic will follow.
To locate your Endpoint ID, perform the following steps:
- From VPC > Endpoints, locate the endpoint that you created from the list shown. After creating the endpoint, the status for the endpoint may initially display as pending, and may take several minutes to complete. When complete, it will display as available.
- Click the Subnets tab at the bottom of the screen and verify all associated subnets are fully provisioned and have IPv4 addresses assigned.
- Copy the Endpoint ID for the endpoint, this is needed later within Dremio Cloud to complete the service's configuration.
Regional Service Names
Refer to the below chart for the service name that matches the AWS region that you are deploying Dremio Cloud.
|AWS Region||Service Name|
|US East (N. Virginia)|
|US East (Ohio)|
|US West (N. California)|
|US West (Oregon)|