AWS PCS VPC and subnet requirements and considerations - AWS PCS
VPC requirements and considerationsSubnet requirements and considerations

AWS PCS VPC and subnet requirements and considerations

When you create an AWS PCS cluster, you specify a VPC a subnet in that VPC. This topic provides an overview of AWS PCS specific requirements and considerations for the VPC and subnet(s) that you use with your cluster. If you don't have a VPC to use with AWS PCS, you can create one using an AWS-provided AWS CloudFormation template. For more information about VPCs, see Virtual private clouds (VPC) in the Amazon VPC User Guide.

VPC requirements and considerations

When you create a cluster, the VPC that you specify must meet the following requirements and considerations:

  • The VPC must have a sufficient number of IP addresses available for the cluster, any nodes, and other cluster resources that you want to create. For more information, see IP addressing for your VPCs and subnets in the Amazon VPC User Guide.

  • The VPC must have a DNS hostname and DNS resolution support. Otherwise, nodes can't register the customer cluster. For more information, see DNS attributes for your VPC in the Amazon VPC User Guide.

  • The VPC might require VPC endpoints using AWS PrivateLink to be able to contact the AWS PCS API. For more information, see Connect your VPC to services using AWS PrivateLink in the Amazon VPC User Guide.

Subnet requirements and considerations

When you create a Slurm cluster, AWS PCS creates an Elastic Network Interface(ENI) in the subnet you specified. This network interface enables communication between the scheduler controller and the customer VPC. The network interface also enables Slurm to communicate with the components deployed in the customer account. You can only specify the subnet for a cluster at creation time.

Subnet requirements for clusters

The subnet that you specify when you create a cluster must meet the following requirements:

  • The subnet must have at least 1 IP address for use by AWS PCS.

  • The subnet can't reside in AWS Outposts, AWS Wavelength, or an AWS Local Zone.

  • The subnet can be a public or private. We recommend that you specify a private subnet, if possible. A public subnet is a subnet with a route table that includes a route to an internet gateway; a private subnet is a subnet with a route table that doesn't include a route to an internet gateway.

Subnet requirements for nodes

You can deploy nodes and other cluster resources to the subnet you specify when you create your AWS PCS cluster, and to other subnets in the same VPC.

Any subnet that you deploy nodes and cluster resources to must meet the following requirements:

  • You must ensure that the subnet has enough available IP addresses to deploy all the nodes and cluster resources.

  • If you plan to deploy nodes to a public subnet, that subnet must auto-assign IPv4 public addresses.

  • If the subnet where you deploy nodes to is a private subnet and its route table doesn't include a route to a network address translation (NAT) device (IPv4), add VPC endpoints using AWS PrivateLink to the customer VPC. VPC endpoints are needed for all the AWS services that the nodes contact. The only required endpoint is for AWS PCS to allow the node to call the registerNodeGroupInstances API action.

  • Public or private subnet status doesn't impact AWS PCS; the required endpoints must be reachable.