AWS VPC peering

By creating a virtual private cloud (VPC), you can connect your AWS resources and DataStax Astra DB databases. VPC peering allows you to communicate across the VPCs.

For more about VPC peering on Astra DB databases hosted on AWS, see What is VPC peering?.

VPC peering is available on only Classic C- and D-tier Astra DB databases.

Prerequisites

Create a VPC in your AWS account. See Create the VPC.
Create your Astra DB database. See Creating your Astra DB database.

Adding the peering connection

From your database Overview, select Add Peering Connection.
In Add Peering Connection, enter your Account ID from My Account within your AWS Console without any dashes.
Enter the VPC ID you want to use from your list of VPCs in your AWS VPC dashboard.
Enter the VPC CIDR (classless inter-domain routing) block for your AWS VPC. If desired, whitelist the CIDR block by selecting the option.

The CIDR block cannot overlap your Astra DB VPC CIDR block.
Select the receiving Application VPC Region.

To reduce latency, DataStax recommends selecting a geographically close region for the Astra DB database and your AWS VPC.
Select Initiate.

Accepting the peering request

Accept the peering connection:

aws ec2 accept-vpc-peering-connection --vpc-peering-connection-id ASTRA_CONNECTION_ID --region AWS_REGION

See Accepting a VPC peering connection.

Get the REQUESTER_VPC_CIDR_BLOCK:

aws ec2 describe-vpc-peering-connections --vpc-peering-connection-ids "$PEERING_CONNECTION_ID" --region "$REGION" | jq -r ".VpcPeeringConnections[].RequesterVpcInfo.CidrBlock"

Add the route in route table with sender’s CIDR and peering connection ID:

aws ec2 create-route --route-table-id AWS_ROUTE_TABLE_ID --destination-cidr-block REQUESTER_VPC_CIDR_BLOCK --vpc-peering-connection-id CONNECTION_ID --region AWS_VPC_REGION

See Updating your Route tables for a VPC peering connection. . Once you’ve created a VPC peering connection, download the secure connect bundle for internal VPC network to connect to your database.