VPC Endpoints
👨💻 AWS Cloud Engineer | Around 6 years of Corporate Experience | Driving Innovation in Cloud Solutions 🔧 Day-to-Day Tasks: Specialize in creating AWS infrastructure for Migration Projects. Leveraging services such as S3, SNS, SQS, IAM, Lambda, System Manager, Kinesis, OpenSearch, Cognito, Storage Gateway, Cloud Watch, API Gateway, AWS Event Scheduler, Secret Manager, ECS, Application Load Balancer, VPC among others. Additionally, I excel in crafting Splunk Dashboards and implementing alerting mechanisms for Cloud Watch logs to monitor failures. My approach involves constructing AWS infrastructure using the Serverless framework and Cloud Formation templates, while automating tasks through Boto3 (Python Scripting) Lambdas. 🎯 Passion: I am deeply passionate about continuously learning new technologies and eagerly anticipate the transformative impact of cloud computing on the tech landscape. 📧 Connect: Feel free to reach out to me at awslearningoals@gmail.com. Let's connect and explore potential collaborations! https://www.linkedin.com/in/rastogiutkarsh/
Amazon VPC Concepts Learning --> Day4
VPC Endpoints
A VPC endpoint enables private connection between supported AWS services and VPC endpoint services powered by AWS PrivateLink, eliminating the need of public IP address, and ensuring traffic remains within Amazon network.
Virtual devices are known as VPC endpoints.
They are redundant, highly available, horizontally scaled Amazon VPC components that facilitate communication between instances within an Amazon VPC and services without putting network traffic under availability or bandwidth restrictions.
Endpoint policy grants full access to the service by default. JSON format is required when writing endpoint policies.
Two categories of VPC endpoint exists
Interface endpoint - A grouping of one or more elastic network interfaces with a private IP address that acts as an entry point for traffic headed for a supported service is known as an interface endpoint.
Gateway endpoint - A gateway endpoint is a destination you designate in your route table for traffic heading to an AWS service that is supported. Supports DynamoDB and S3 services only.
Limitations
VPC endpoints
IPv4 traffic only supported by VPC endpoints.
It can be used within the same region.
Inability to establish an endpoint between a VPC and service located in different region.
Not able to move an endpoint between VPCs or services
Interface endpoint
Only one subnet per Availability Zone may be associated with each interface endpoint.
It can only handle TCP traffic.
Cannot be transmitted across VPCs or services.
It can handle up to 10 Gbps of bandwidth per Availability Zone.
Gateway endpoint
- Not accessible by Transit Gateway, VPC Peering, VPN, or Direct Connect when outside of the VPC
https://awslearner.hashnode.dev/amazon-web-services-via-category
