Advanced networking with Amazon S3 and AWS PrivateLink
summary
Gateway-style VPC endpoints (launched 2015) route S3 traffic via routing table entries and gateway endpoints are free, but they don’t support on‑prem or cross‑region access. PrivateLink interface endpoints provision ENIs in each AZ that resolve to private IPs and interface endpoints use ENIs with private IPs and endpoint‑specific DNS (regional and zonal). Interface endpoints add hourly and per‑GB fees, replace proxy fleets over Direct Connect/VPN, enable shared‑services VPCs for centralized policies, support cross‑region access via VPC peering, and use endpoint policies plus the new s3:ResourceAccount condition.
AI-written summary · about
chapters (11)
- 0:00Introduction to session
- 0:22VPC endpoints overview
- 1:03Gateway vs interface endpoints
- 3:33Interface endpoints deep dive
- 7:11PrivateLink for on-premises access
- 9:44Advanced multi-VPC use cases
- 13:01Cross-region access with endpoints
- 14:02Endpoint policies explained
- 16:54Partner integrations
- 17:16Recap and conclusion
- 19:01Q&A session
related talks
29mAmazon VPC design and new VPC capabilities
29mNetworking foundations: Establish VPC connectivity
28mAWS Networking Fundamentals
29mAdvanced VPC Connectivity Patterns
17mAWS On Air ft. Cloud WAN & Direct Connect SiteLink
01h 04mnetworking fundamentals: Set up your global network
58mConnect your network to with hybrid solutions
31mConnect your network to AWS with hybrid connectivity solutions