VPC对等连接

1aws ec2 create-vpc --cidr-block ipv4-cidr-block

1aws ec2 create-vpc --cidr-block 172.20.0.0/16 --region us-east-1 --tag-specifications 'ResourceType=vpc,Tags=[{Key=Name,Value=requester-vpc}]'

1aws ec2 create-vpc --cidr-block 172.21.0.0/16 --region us-east-1 --tag-specifications 'ResourceType=vpc,Tags=[{Key=Name,Value=acceptor-vpc}]'

1aws ec2 create-vpc-peering-connection --vpc-id REQUESTER_VPC_ID --peer-vpc-id ACCEPTOR_VPC_ID

1aws ec2 create-vpc-peering-connection --vpc-id vpc-0526f4c17ed2109ab --peer-vpc-id vpc-04e48b724eb67b806

创建VPC对等连接的输出结果

1{
2    "VpcPeeringConnection": {
3        "AccepterVpcInfo": {
4            "OwnerId": "0123456789",
5            "VpcId": "vpc-04e48b724eb67b806",
6            "Region": "us-east-1"
7        },
8        "ExpirationTime": "2023-05-31T17:18:25+00:00",
9        "RequesterVpcInfo": {
10            "CidrBlock": "172.20.0.0/16",
11            "CidrBlockSet": [
12                {
13                    "CidrBlock": "172.20.0.0/16"
14                }
15            ],
16            "OwnerId": "0123456789",
17            "PeeringOptions": {
18                "AllowDnsResolutionFromRemoteVpc": false,
19                "AllowEgressFromLocalClassicLinkToRemoteVpc": false,
20                "AllowEgressFromLocalVpcToRemoteClassicLink": false
21            },
22            "VpcId": "vpc-0526f4c17ed2109ab",
23            "Region": "us-east-1"
24        },
25        "Status": {
26            "Code": "initiating-request",
27            "Message": "Initiating Request to 0123456789"
28        },
29        "Tags": [],
30        "VpcPeeringConnectionId": "pcx-0c37a65f12807df97"
31    }
32}

1aws ec2 accept-vpc-peering-connection --vpc-peering-connection-id PEERING_ID

1aws ec2 accept-vpc-peering-connection --vpc-peering-connection-id pcx-0c37a65f12807df97

接受VPC对等连接的输出结果

1{
2    "VpcPeeringConnection": {
3        "AccepterVpcInfo": {
4            "CidrBlock": "172.21.0.0/16",
5            "CidrBlockSet": [
6                {
7                    "CidrBlock": "172.21.0.0/16"
8                }
9            ],
10            "OwnerId": "0123456789",
11            "PeeringOptions": {
12                "AllowDnsResolutionFromRemoteVpc": false,
13                "AllowEgressFromLocalClassicLinkToRemoteVpc": false,
14                "AllowEgressFromLocalVpcToRemoteClassicLink": false
15            },
16            "VpcId": "vpc-04e48b724eb67b806",
17            "Region": "us-east-1"
18        },
19        "RequesterVpcInfo": {
20            "CidrBlock": "172.20.0.0/16",
21            "CidrBlockSet": [
22                {
23                    "CidrBlock": "172.20.0.0/16"
24                }
25            ],
26            "OwnerId": "0123456789",
27            "PeeringOptions": {
28                "AllowDnsResolutionFromRemoteVpc": false,
29                "AllowEgressFromLocalClassicLinkToRemoteVpc": false,
30                "AllowEgressFromLocalVpcToRemoteClassicLink": false
31            },
32            "VpcId": "vpc-0526f4c17ed2109ab",
33            "Region": "us-east-1"
34        },
35        "Status": {
36            "Code": "provisioning",
37            "Message": "Provisioning"
38        },
39        "Tags": [],
40        "VpcPeeringConnectionId": "pcx-0c37a65f12807df97"
41    }
42}

请求方VPC路由表

接受方VPC路由表

1aws ec2 create-route --route-table-id RTB_ID --destination-cidr-block DSTN_CIDR --vpc-peering-connection-id PEERING_ID

1aws ec2 create-route --route-table-id rtb-0929de9de812bd4fb --destination-cidr-block 172.21.0.0/16 --vpc-peering-connection-id pcx-0c37a65f12807df97

1aws ec2 create-route --route-table-id rtb-0f4f55ad9b8a177e2 --destination-cidr-block 172.20.0.0/16 --vpc-peering-connection-id pcx-0c37a65f12807df97

1aws ec2 reject-vpc-peering-connection --vpc-peering-connection-id PEERING_ID

1aws ec2 delete-vpc-peering-connection --vpc-peering-connection-id PEERING_ID

1aws ec2 delete-vpc-peering-connection --vpc-peering-connection-id pcx-0c37a65f12807df97

请按照以下步骤执行命令：

1. 接下来，在你自己的终端中执行以下命令，通过程序化方式与 AWS 账户进行交互。

2. 使用终端时，在收到特定命令的输出后，按 Enter 查看完整输出，按 q 退出并执行下一个命令。

注意： 有关如何创建AWS安全凭证（即访问密钥和秘密访问密钥）的说明，请参阅附录中的《创建AWS安全凭证》课程。