aws / aws/aws-cli

The distribution URL is not reachable from private VPCs

Open
#7,989 1 comment 0 reactions 0 assignees View on GitHub
feature-request installation p2
Dominant language
Python
Stars
17.3k
Forks
4.6k
Avg merge
1d 2h
Merged PRs (30d)
13

Description

### Describe the feature

The distribution URL for the AWS CLI is hosted somewhere, which is not reachable to private VPCs, so an instance or a Lambda function that runs inside such a VPC cannot reach and download the updated package.

### Use Case

In a highly regulated environment, it is often feasible to have protected VPCs which do not have Internet access. However, in such VPCs one can provision the S3 VPC endpoint to work with S3 buckets over the PrivateLink. The majority of AWS software updates are stored inside S3 buckets, hence it is possible to update that software from inside the private VPCs (and to have control around what is allowed to be downloaded via the S3 VPC endpoint and what is not).

However, with AWS CLI v2 this is not the case and there is no way to download the package from inside the private VPC.

### Proposed Solution

The easiest way would be to have an official S3 bucket for AWSCLIv2 releases. This will allow the package to be retrieved through the S3 VPC endpoint.

### Other Information

_No response_

### Acknowledgements

- [ ] I may be able to implement this feature request
- [ ] This feature might incur a breaking change

### CLI version used

2.12.1

### Environment details (OS name and version, etc.)

Any

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.