Steps for VPC Connection:
Use existing VPC connection or create a new connection by following the Amazon VPC documentation.
Make sure you have NAT Gateway which routes the traffic to internet.
Choose VPC endpoint as Amazon S3 Gateway to create connection.
Enable DNS resolution and DNS hostname to use AWS provided DNS Services.
Go to created VPC and add necessary endpoints for different services like STS, AWS Glue, Secret Managers.
Choose Create Endpoint.
For Service Category, choose AWS Services.
For Service Name, choose the service that you are connecting to.
Choose VPC and Enable DNS Name.
VCP Endpoints required for VPC connection:
Security Group Configuration
Security group must allow traffic to its listening port from AWS Glue VPC for AWS Glue to be able to connect to it. It is a good practice to restrict the range of source IP addresses as much as possible.
AWS Glue requires special security group that allows all inbound traffic from itself. You can create a self-referencing rule that allows all traffic originating from the security group. You can modify an existing security group and specify the security group as source.
Open the communication from the HTTPS ports of the URL endpoint (either NLB or SAP instance).
Connectivity options
HTTPS connection with internal and external NLB, SSL certificate from certificate authority (CA), not self-signed SSL certificate
HTTPS connection with SAP instance SSL certificate from certificate authority (CA), not self-signed SSL certificate
