title: How to connect AWS Glue to a VPC, and access private resources?
body: <p>I am trying to connect to services and databases running inside a VPC (private subnets) from an AWS Glue job. The private resources should not be exposed publicly (e.g., moving to a public subnet or setting up public load balancers).</p>
  
  <p>Unfortunately, AWS Glue doesn't seem to support running inside user defined VPCs. AWS does provide something called <a href="https://docs.aws.amazon.com/glue/latest/dg/start-connecting.html" rel="noreferrer">Glue Database Connections</a> which, when used with the Glue SDK, magically set up elastic network interfaces inside the specified VPC for Glue/Spark worker nodes. The network interfaces then tunnel traffic from Glue to a specific database inside the VPC. However, this requires the location and credentials of specific databases, and it is not clear if and when other traffic (e.g., a REST call to a service) is tunnelled through the VPC.</p>
  
  <p>Is there a reliable way to setup a Glue -> VPC connection that will tunnel all traffic through a VPC?</p>