amazon-web-services - Can I use SNS subscription with internal ALB endpoint within the VPC?

Question

I have an SNS uses an HTTP subscription, the endpoint is an application load balancer which is created as an internal ALB within the VPC.

For SNS to call the endpoint I have to make the endpoint publicly available, I can't make the endpoint public just for SNS as my other use cases are getting addressed within the VPC.

Is there a better way to create a subscription without having to make the endpoint public.

I have for now made the endpoint public, but cant keep it the same forever

Is there a better way to create a subscription without having to make the endpoint public.

标签： amazon-web-servicesamazon-snsamazon-elbamazon-vpc

Answer 1

一种可能的解决方案是订阅 Lambda 函数（部署在您的 VPC 中）以将请求代理到您的内部 ALB。

有关您的函数将接收的事件示例，请参阅将 AWS Lambda 与 Amazon SNS 结合使用。

请注意，无法像使用 HTTP/HTTPS 端点时那样配置自定义传递重试策略。相反，您将拥有基本的AWS Lambda Retry Behavior。