Manage an organization VPC peering with AWS Limited availability

Set up a peering connection between your Aiven organization VPC and an AWS VPC.

Prerequisites

• Manage organization networking permissions
• Two VPCs to be peered: an organization VPC in Aiven and a VPC in your AWS account
• Access to the AWS Management Console
• One of the following tools for operations on the Aiven Platform:
  • Aiven Console
  • Aiven API
  • Aiven Provider for Terraform

Create a peering connection

Collect data from AWS

To create a peering connection in Aiven, first collect the required data from AWS:

1. Log in to the AWS Management Console and go to your profile information.
2. Find and save your account ID.
3. Open the navigation menu, and select All services.
4. Find Networking & Content Delivery, and go to VPC > Your VPCs.
5. Find a VPC to peer, preview its details, and save its ID and a cloud region that it's located in.

Create a peering in Aiven

With the data collected from AWS, create an organization VPC peering connection using a tool of your choice:

Aiven Console

1. Log in to the Aiven Console, and click Admin in the top navigation bar.
2. Click VPCs in the sidebar.
3. On the Virtual private clouds page, select an organization VPC to peer.
4. On the VPC details page, go to the VPC peering connections section and click Create peering request.
5. In the Create peering request window:
   1. Enter the following:
      • AWS account ID
      • AWS VPC region
      • AWS VPC ID
   2. Click Create.

Aiven API

Make an API call to the OrganizationVpcPeeringConnectionCreate endpoint:

curl --request POST \
  --url https://api.aiven.io/v1/organization/ORGANIZATION_ID/vpcs/ORGANIZATION_VPC_ID/peering-connections \
  --header 'Authorization: Bearer BEARER_TOKEN' \
  --header 'content-type: application/json' \
  --data '
    {
      "peer_cloud_account":"AWS_ACCOUNT_ID",
      "peer_vpc":"AWS_VPC_ID"
    }
  '

Replace the following placeholders with meaningful data:

• ORGANIZATION_ID
• ORGANIZATION_VPC_ID
• BEARER_TOKEN
• AWS_ACCOUNT_ID
• AWS_VPC_ID

Aiven Provider for Terraform

Use the aiven_aws_org_vpc_peering_connection resource.

This adds a connection with the Pending peer status in the Aiven Console and a connection pending acceptance in the AWS Management Console.

Accept the peering request in AWS

1. Log in to the AWS Management Console, open the navigation menu, and select All services.
2. Find Networking & Content Delivery, and go to VPC > Peering connections.
3. Find your peering connection from Aiven pending acceptance, select it, and click Actions > Accept request.
4. Create or update your AWS route tables to match your Aiven CIDR settings.

At this point, your peering connection status should be visible as Active both in the Aiven Console and in the AWS Management Console.

Delete the peering

important

Once you delete your VPC peering on the Aiven Platform, the cloud-provider side of the peering connection becomes inactive or deleted, and the traffic between the disconnected VPCs is terminated.

Delete an organization VPC peering using a tool of your choice:

Aiven Console

1. Log in to the Aiven Console, and click Admin in the top navigation bar.
2. Click VPCs in the sidebar.
3. On the Virtual private clouds page, select an organization VPC.
4. On the VPC details page, go to the VPC peering connections section, find the peering to be deleted, and click Actions > Delete.
5. In the Confirmation window, click Delete VPC peering.

Aiven API

Make an API call to the OrganizationVpcPeeringConnectionDelete endpoint:

curl --request DELETE \
  --url https://api.aiven.io/v1/organization/ORGANIZATION_ID/vpcs/ORGANIZATION_VPC_ID/peering-connections/PEERING_CONNECTION_ID \
  --header 'Authorization: Bearer BEARER_TOKEN'

Replace the following placeholders with meaningful data:

• ORGANIZATION_ID: Aiven organization ID
• ORGANIZATION_VPC_ID: Aiven organization VPC ID
• PEERING_CONNECTION_ID: ID or name of your cloud provider VPC
• BEARER_TOKEN

Aiven Provider for Terraform

To delete your aiven_CLOUD_PROVIDER_NAME_org_vpc_peering_connection resource, run terraform destroy. See the Aiven Provider for Terraform documentation for details.