Set api gateway under an internal VPC fraemwork

[ekeren]

Feature Spec

You can now setup cloud.Api inside newly created / exiting VPC.
The cloud.Api endpoint will be private and only accessible from within the vpc

Use Cases

NA

Implementation Notes

It might be enough to just create an example that is leverging existing policy/platform capabilities as as a reference implementation

https://winglang.slack.com/archives/C047QFSUL5R/p1700460092970559

Component

SDK, Plugins

Community Notes

• Please vote by adding a 👍 reaction to the issue to help us prioritize.
• If you are interested to work on this issue, please leave a comment.
• If this issue is labeled needs-discussion, it means the spec has not been finalized yet. Please reach out on the #dev channel in the Wing Slack.

[ekeren]

@rkazakov is there any specific information or use case you want to add to this issue?

[ekeren]

I've noticed this

Endpoint Configuration

https://github.com/aws/aws-cdk/blob/b865320674f97bd7dd7cfcc69235d3521e6aa0d4/packages/aws-cdk-lib/aws-apigateway/README.md?plain=1#L1395-L1432

Private Integrations

https://github.com/aws/aws-cdk/blob/b865320674f97bd7dd7cfcc69235d3521e6aa0d4/packages/aws-cdk-lib/aws-apigateway/README.md?plain=1#L1433-L1473

@rkazakov, is this the desired configuration

[rkazakov]

Hey @ekeren,
Looks like it.
Endpoint Configuration allows to set endpoint type to PRIVATE and Private Integrations option has VPC_LINK.

[rkazakov]

I can't see how we can add a resource policy though.

[ekeren]

This is a reference blog for how to setup your api gateway inside VPC

https://dulajra.medium.com/how-to-create-a-vpc-endpoint-for-api-gateway-a84bc7eeba28

[ekeren]

related PR #5290

[ekeren]

PR #5290 is merged, waiting for the release.

Once it is released, We need to make sure that this solution works by following instructions in https://github.com/ekeren/wing-apigatway-vpc

https://github.com/ekeren/wing-apigatway-vpc includes a custom provider that does the work placing all lambdas and Api Gateways inside the VPC

[ekeren]

@rkazakov - Verified to work on my side

Can you please check instructions on https://github.com/ekeren/wing-apigatway-vpc and let me know if this works as you expected?

[staycoolcall911]

@hasanaburayyan , @revitalbarletz - can we close this issue?

[rkazakov]

Hey @ekeren,
Apologies for the delay. Going to look into it in the next few days.
Cheers,
Ruslan