Internet Access to lambda function without NAT

8
votes

I have a AWS Aurora db in vpc in private subnet. From Aurora, we need to execute lambda which will connect to pinpoint to send sms. Lambda function needs access to internet. How to provide internet to vpc without using nat

1
amazon-web-servicesaws-lambdaamazon-aurora
whats the problem using NAT ? There is no endpoint for Pinpoint like S3/DynanoDB. - James Dean
One problem is cost. When using a serverless stack, it's possible for costs to be basically 0 at low to moderate usage. Once you need a NAT, you're looking at a minimum of $30/month, regardless of how low your usage is. - Tomty
Note that if cost is, in fact, the issue, you can use a NAT Instance (docs.aws.amazon.com/vpc/latest/userguide/VPC_NAT_Instance.html) instead of a NAT Gateway, whose fixed costs can theoretically go as low as $4-7/month. - Tomty

1 Answers

5
votes

As per the AWS docs, if your Lambda function is in a Private Subnet in a VPC, and needs internet access, you need a NAT gateway.

See: Grant Internet Access to a VPC Lambda Function