Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

PHZ for Sagemaker API not correct #690

Open
2 of 6 tasks
sandrich opened this issue Jan 6, 2025 · 1 comment
Open
2 of 6 tasks

PHZ for Sagemaker API not correct #690

sandrich opened this issue Jan 6, 2025 · 1 comment
Labels
bug Something isn't working pending-release This issue will be resolved in an upcoming release

Comments

@sandrich
Copy link

sandrich commented Jan 6, 2025

Describe the bug
When deploying SageMaker VPC endpoints, the wrong Route53 PHZ are created causing the error

App Creation failed with exception: Could not connect to the endpoint URL: "https://api.sagemaker.eu-west-1.amazonaws.com/"

The change was introduced in e8f3d71

To Reproduce
Define VPC Endpoint for sagemaker.api and sagemaker.runtime

This creates PHZ for api.sagemaker.eu-west-1.sagemaker.aws and runtime.sagemaker.eu-west-1.sagemaker.aws

Expected behavior
It should create PHZ for api.sagemaker.eu-west-1.amazonaws.com and runtime.sagemaker.eu-west-1.amazonaws.com as defined in https://docs.aws.amazon.com/general/latest/gr/sagemaker.html

Please complete the following information about the solution:

  • Version: v1.11.0
  • Region: eu-west-1
  • Was the solution modified from the version published on this repository?
  • If the answer to the previous question was yes, are the changes available on GitHub?
  • Have you checked your service quotas for the services this solution uses?
  • Were there any errors in the CloudWatch Logs?

Screenshots
If applicable, add screenshots to help explain your problem (please DO NOT include sensitive information).
image

Additional context
Add any other context about the problem here.

@sandrich sandrich added the bug Something isn't working label Jan 6, 2025
@bo1984
Copy link

bo1984 commented Feb 3, 2025

Hi @sandrich! Thank you for making us aware of this and for utilizing the Landing Zone Accelerator on AWS (LZA) solution. This has been addressed and will be included in our 1.12 release that's aimed for end of March as of now. In the meantime, if you need to bypass this misconfiguration of the private hosted zone associated with the VPC Endpoint; for VPCs that need to make private access to the Amazon Sagemaker control plane, you can provision a VPC interface endpoint (through the LZA) for those particular VPC(s).

@bo1984 bo1984 added the pending-release This issue will be resolved in an upcoming release label Feb 3, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working pending-release This issue will be resolved in an upcoming release
Projects
None yet
Development

No branches or pull requests

2 participants