Mecanor: since last night, the plant's servers can no longer reach api.mecanor.ma, which works from outside

Mecanor Industrie (a fictional automotive supplier in the Kenitra industrial zone) receives orders from car manufacturers through its public API api.mecanor.ma (an ALB in AWS). Several internal applications in the production VPC (planning, labelling, EDI) also call this API by its public name.

Yesterday at 18:30, the infrastructure team created a Route 53 private hosted zone to give names to internal servers (erp.mecanor.ma, gmao.mecanor.ma…) and associated it with the production VPC. Since the night, internal applications have been failing: “Could not resolve host: api.mecanor.ma”. The car manufacturers, however, are sending their orders without any trouble. The plant's night shift is printing labels by hand.

You are a cloud engineer, logged in to the bastion inside the VPC (vpc-0d3f5b7a9c1e24680) with the AWS CLI v2 (region eu-west-1).