Vpc Endpoint Service

You need to remember one thing.

Vpc endpoint service. An s3 vpc endpoint provides a way for an s3 request to be routed through to the amazon s3 service without having to connect a subnet to an internet gateway. A vpc endpoint enables you to privately connect your vpc to supported aws services and vpc endpoint services powered by aws privatelink without requiring an internet gateway nat device vpn connection or aws direct connect connection. Other aws principals can create a connection from their vpc to your endpoint service using an interface vpc endpoint or a gateway load balancer endpoint depending on the type of service.

Create a vpc endpoint service if you don t already have one. Vpc endpoints are virtual devices which can be horizontally scaled redundant and highly available vpc components that allow communication between instances in your vpc and services without. An interface vpc endpoint is an elastic network interface with a private ip address that serves as an entry point for traffic destined to a vpc endpoint service.

A vpc endpoint can be created in another vpc in the same region and then used as a channel to access the endpoint service. A vpc endpoint can only connect to a vpc endpoint service in the same availability zone. You can create your own application in your vpc and configure it as an aws privatelink powered service referred to as an endpoint service.

For the names to be consistent across accounts you need to identify them with availability zone ids. That s more relevant for a zone like us east 1 which has six azs. The s3 vpc endpoint is what s known as a gateway endpoint.

If you already created the service but didn t specify a private dns name you can modify an existing endpoint service to add the private dns name.