VPC Endpoints

• Allow using AWS Service using Private Network from VPC
• No need of IG and NAT Gateway
• Two types of VPC Endpoints
• Gateway
  • S3 and DynamoDB uses Gateway
  • Provision ENI (i.e. Private IP Address) as entry point
  • Need SG
• Interface
  • Provision Target and use Route Table
  • Service, other than S3 and DynamoDB, uses Gateway
• To establish a VPC Endpoint
• Check DNS Resolution
• Check Route Table
• When there is VPC Endpoint and a Public Internet Connection, VPC Endpoint got priority.
• VPC Endpoint does not support cross region request
• From a single Route Table, can not have multiple VPC Endpoints of the same service.
• FYI, A service can have multiple endpoints
• To allow S3 to as VPC Endpoint Gateway, needs Endpoint Policy for trusted VPC