AWS APIs

As detailed in the prerequisites, if you are deploying the solution to an existing VPC, the following services must be accessible from your private subnets.

API Gateway

• GetAuthorizers

• GetIntegration

• GetMethod

• GetResources

• GetRestApis

Cognito

• DescribeUserPool

Config

• BatchGetAggregateResourceConfig

• DescribeConfigurationAggregators

• ListAggregateDiscoveredResources

• SelectAggregateResourceConfig

DynamoDB Streams

• DescribeStream

Amazon EC2

• DescribeInstances

• DescribeSpotFleetRequests

• DescribeSpotInstanceRequests

• DescribeTransitGatewayAttachments

Amazon Elastic Load Balancer

• DescribeLoadBalancers

• DescribeListeners

• DescribeTargetGroups

• DescribeTargetHealth

Amazon Elastic Kubernetes Service

• DescribeNodegroup

• ListNodegroups

IAM

• GetAccountAuthorizationDetails

• ListPolicies

Lambda

• GetFunction

• GetFunctionConfiguration

• ListEventSourceMappings

OpenSearch Service

• DescribeDomains

• ListDomainNames

Organizations

• ListAccounts

• ListAccountsForParent

• ListOrganizationalUnitsForParent

• ListRoots

Amazon Simple Notification Service

• ListSubscriptions

Amazon Security Token Service

• AssumeRole