[アップデート] VPC Lattice が Amazon ECS とのネイティブ統合をサポートしました

{
  "Version" : "2012-10-17",
  "Statement" : [
    {
      "Sid" : "ManagedVpcLatticeTargetRegistration",
      "Effect" : "Allow",
      "Action" : [
        "vpc-lattice:RegisterTargets",
        "vpc-lattice:DeregisterTargets"
      ],
      "Resource" : [
        "arn:aws:vpc-lattice:*:*:targetgroup/*"
      ]
    },
    {
      "Sid" : "DescribeVpcLatticeTargetGroup",
      "Effect" : "Allow",
      "Action" : "vpc-lattice:GetTargetGroup",
      "Resource" : [
        "arn:aws:vpc-lattice:*:*:targetgroup/*"
      ]
    },
    {
      "Sid" : "ListVpcLatticeTargets",
      "Effect" : "Allow",
      "Action" : "vpc-lattice:ListTargets",
      "Resource" : [
        "arn:aws:vpc-lattice:*:*:targetgroup/*"
      ]
    },
    {
      "Sid" : "DescribeEc2Resources",
      "Effect" : "Allow",
      "Action" : [
        "ec2:DescribeSubnets",
        "ec2:DescribeVpcs",
        "ec2:DescribeInstances"
      ],
      "Resource" : [
        "*"
      ]
    }
  ]
}

{
	"Version": "2012-10-17",
	"Statement": [
		{
			"Effect": "Allow",
			"Principal": "*",
			"Action": "vpc-lattice-svcs:Invoke",
			"Resource": "*",
			"Condition": {
				"StringNotEquals": {
					"aws:PrincipalType": "Anonymous"
				},
				"StringEquals": {
					"vpc-lattice-svcs:SourceVpc": "vpc-1a2b3c4d"
				}
			}
		}
	]
}

from fastapi import FastAPI, Request
from typing import Dict

app = FastAPI()

@app.get("/headers")
async def get_headers(request: Request) -> Dict:
    return {"headers": dict(request.headers)}

@app.get("/")
async def root():
    return {"message": "Welcome to the Headers API"}

[ssm-user@ip-10-0-1-213 ~]$ ifconfig
enX0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 9001
        inet 10.0.1.213  netmask 255.255.255.0  broadcast 10.0.1.255
        inet6 fe80::49a:67ff:fe66:264f  prefixlen 64  scopeid 0x20<link>
        ether 06:9a:67:66:26:4f  txqueuelen 1000  (Ethernet)
        RX packets 4422  bytes 707958 (691.3 KiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 4622  bytes 686513 (670.4 KiB)        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

lo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536
        inet 127.0.0.1  netmask 255.0.0.0
        inet6 ::1  prefixlen 128  scopeid 0x10<host>
        loop  txqueuelen 1000  (Local Loopback)
        RX packets 12  bytes 1020 (1020.0 B)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 12  bytes 1020 (1020.0 B)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

[ssm-user@ip-10-0-1-213 ~]$ curl -s ecslattice-01-svc-00000000000000000.7d67968.vpc-lattice-svcs.ap-northeast-1.on.aws/ | jq
{  "message": "Welcome to the Headers API"
}
[ssm-user@ip-10-0-1-213 ~]$ curl -s ecslattice-01-svc-00000000000000000.7d67968.vpc-lattice-svcs.ap-northeast-1.on.aws/headers | jq
{
  "headers": {
    "host": "ecslattice-01-svc-00000000000000000.7d67968.vpc-lattice-svcs.ap-northeast-1.on.aws",
    "user-agent": "curl/8.5.0",
    "accept": "*/*",
    "x-forwarded-for": "10.0.1.213",
    "x-amzn-lattice-network": "SourceVpcArn=arn:aws:ec2:ap-northeast-1:123456789012:vpc/vpc-032dbed1cacd149af",
    "x-amzn-lattice-target": "ServiceArn=arn:aws:vpc-lattice:ap-northeast-1:123456789012:service/svc-00000000000000000; ServiceNetworkArn=arn:aws:vpc-lattice:ap-northeast-1:123456789012:servicenetwork/sn-0896b9
4dcf5a98c64; TargetGroupArn=arn:aws:vpc-lattice:ap-northeast-1:123456789012:targetgroup/tg-076e6345721be1482",
    "x-amzn-source-vpc": "vpc-032dbed1cacd149af"  }
}