无法从EC2实例访问使用AWS API Gateway公开的Web服务。 返回403 {“message”：“Forbidden”}

Question

I created REST API using AWS API Gateway with following details

• Endpoint Type: Edge Optimized
• Integration Type: Mock
• The API is open with
  • Auth: None
  • Api Key Required: False
  • Request Validator: None
  • Resource-policy: Not defined

I successfully deployed the API

API is accessible from the outside world/ public network

API is not accessible from the EC2 instance launched in same account(Not tried to access it from other AWS account). API returns with 403 { "message": "Forbidden" }

What I am missing here which makes the API inaccessible from EC2 ?

Answer 1

I had the same problem. It turned out that I had a VPC endpoint with private DNS in that VPC, see https://aws.amazon.com/ru/premiumsupport/knowledge-center/api-gateway-vpc-connections/ :

When you select the Enable Private DNS Name option while creating an interface VPC endpoint for API Gateway, you can access your private APIs using a private or public DNS, but you can't access your public APIs .

Answer 2

Can you please check if you are acessing the correct API GW Endpoint?

API GW returns 403 when you are trying to access an endpoint that doesn't exist.

Also check if you have deployed your latest version.