Cloudformation-coverage-roadmap: AWS::EC2::VPCEndpoint return ENI IP address

[hoegertn]

For interface typed VPC endpoints it would be good to have the private IPs of the ENIs as an attribute accessible via !GetAtt.

For several use cases, DNS names are not enough and you need the IP of the ENI.

Currently, this can only be solved by a custom resource that takes the ENIs (!GetAtt VPCE.NetworkInterfaceIds) and resolves them to IPs.

https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcendpoint.html

Category: Networking & Content (VPC, Route53, API GW,...)

[sc-pulsion]

@hoegertn I dont suppose you have an example of that custom resource to save me re-inventing the wheel? Thanks.

[moqrin3]

@sc-pulsion https://dev.classmethod.jp/cloud/aws/transfer-for-sftp-restrict-ip-cloudformation/

[dkavanagh]

Yes, being able to get these IPs easily and throw them in an NLB TargetGroup would be very handy. Off to write a custom resource to look them up. sigh

[hunyhabib]

I am also facing the same issue, I am trying to create a IP Target group to include VPC endpoint ENI IPs using cloud formation. with the GetAtt i could get the DNS but as mentioned above there is some scenarios we need the IPs.