无法从在 vpc 后面的 ec2 上运行的应用程序访问 aws api 网关上的公共 api

Question

I have an created a public aws api gateway which i have have tested and works with an app deployed on my local and with curl

But when i deploy the app on the ec2 on a vpc it cannot query that public api i get 403 forbidden

Is there any reason as to why i cannot query this api ?

From more debugging i did i created another private api which i can access from the ec2 behind the vpc and everything works fine

I also tried running some curl requests to another public api and that works

It seems my issue is with when access public regional aws api gateway from a vpc

Answer 1

You may be running into the issue described here

https://aws.amazon.com/premiumsupport/knowledge-center/api-gateway-vpc-connections/

Answer 2

Based on the comments, the issue was that the access to regional API was blocked by the VPC interface gateway. As explained here the presence of the gateway is going to block the access to regional and edge APIs.

The solution for now is to use private API gateway endpoint :

An API endpoint that is exposed through interface VPC endpoints and allows a client to securely access private API resources inside a VPC. Private APIs are isolated from the public internet, and they can only be accessed using VPC endpoints for API Gateway that have been granted access.