Use only private subnets

aws-samples · Jan 10, 2024 · 47e178f · 47e178f
1 parent a170fa8
commit 47e178f
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/rag-engines/opensearch-vector/index.ts b/lib/rag-engines/opensearch-vector/index.ts
@@ -45,7 +45,7 @@ export class OpenSearchVector extends Construct {
     const cfnVpcEndpoint = new oss.CfnVpcEndpoint(this, "VpcEndpoint", {
       name: Utils.getName(props.config, "genaichatbot-vpce"),
       // Make sure the subnets are not in the same availability zone.
-      subnetIds: props.shared.vpc.selectSubnets({onePerAz: true}).subnetIds,
+      subnetIds: props.shared.vpc.selectSubnets({onePerAz: true, subnetType: ec2.SubnetType.PRIVATE_ISOLATED}).subnetIds,
       vpcId: props.shared.vpc.vpcId,
       securityGroupIds: [sg.securityGroupId],
     });