Hi Team,
some tech questions from one of the client
1) The request for a token comes back with a field “expires_in” with value 7199, which I assume to mean 1 hour 59 minutes. Is this a meaningless parameter, as I thought this new method of authentication did not require refreshing tokens? Or do I have to acquire a new token every 2 hours?
2) Private Link - the documentation has improved, but is still not great. I have created local endpoints pointing to the Refinitiv service - we are in EU-west-1, so seemingly straightforward. However, the documentation has this on page 25:
“Note: To request authentication tokens or do service discovery, you must establish an AWS PrivateLink connection to RDP Gateway and make requests using that connection”
Does this mean I have to gain the initial authentication token using the Private Link? If so, how? Or is this poorly worded, and these initial requests are performed over the internet and subsequent traffic through the private link will work with the same authentication token? (It seems very circular to use a private link in order to do a service discovery request to tell me that the private link works).
2) Having created the 3 private links on the 3 different tiers (as the docs recommend), which one should we be using? I assume there should be a choice hierarchy based on whether a service is available or not.
3) With Private DNS names enabled for the link, and DNS hostnames and DNS resolution also both enabled for the VPC, does this mean that using a (valid) private link endpoint returned by service discovery will automatically be routed to the endpoint I created in our VPC, and I don’t need to do any more routing/aliasing?
