Validating your VPC connection
Important
Amazon FinSpace Dataset Browser will be discontinued on March 26,
2025. Starting November 29, 2023, FinSpace will no longer accept the creation of new Dataset Browser
environments. Customers using Amazon FinSpace with Managed Kdb Insights
After your connection is set up, you can test connectivity to your network. There are two types of connectivity testing available.
-
Basic testing – You can use the
curlcommand in the SageMaker AI Studio notebook environment that is included with FinSpace for basic testing. -
Advanced testing – You can use the file upload capability in the SageMaker AI Studio notebook to upload your own network diagnostic utilities to test.
Basic connectivity testing using Amazon FinSpace
notebooks
If you're testing connectivity to an HTTP/HTTPS endpoint, you can use a FinSpace notebook to test basic connectivity using curl.
To validate the connection using a notebook
Sign in to the FinSpace web application. For more information, see Signing in to the Amazon FinSpace web application.
-
Open a FinSpace notebook. For more information, see Opening the notebook environment.
-
From the notebook menu bar, choose the plus (+) icon to create a new cell. In the cell, run the
curlcommand in the shell to test connectivity to the host.%local!curl <hostname or URL>For example, run the following command:
%local!curl www.google.comTip
Keep your cursor in the cell and choose the (>) arrow button from the notebook menu to run the command.
If successful, the results of the
curlcommand display in your notebook.
Note
After the VPC connectivity is set up for the environment, the internet
connection is disabled by default. This is the default unless you have an explicit
static route entry in your transit gateway route table that specifies forwarding
all traffic 0.0.0.0/0 to your VPC attachment that has an internet
gateway.
Configuring internet access
To ensure FinSpace can connect to your internet gateway
-
Check that your transit gateway attachment has a private subnet and public subnet with a NAT gateway. The private subnet should be attached to the transit gateway attachment.
-
Check that the VPC attachment has all Availability Zones (AZ) included in the FinSpace response.
-
Add a route for private subnets for directing traffic destined to
100.64.0.0/26to the dedicated account VPC attachment. -
Create a transit gateway static route to direct traffic destined to
0.0.0.0/0to the customer account attachment. For more information, see Create a static route in the AWS Transit Gateway User Guide.Wait a few minutes before running the next command because there might be a delay before the routes are installed.
