All subnets (regardless of whether they are Public or Private) within the same Amazon VPC can communicate with each other by default.
Communication should be made via the private IP address of the resources, to ensure that the traffic stays within the VPC.
If this is not working, check:
- Security Groups on the resources, to ensure they are permitting access (Note: Merely putting resources in the 'same' Security Group does not mean that they can communicate with each other)
- Network ACLs should be left at their default "Allow All" setting. Only change NACLs if there is a very good reason to do so (eg creating a DMZ).
与恶龙缠斗过久,自身亦成为恶龙;凝视深渊过久,深渊将回以凝视…