VPC Endpoint
Network SecurityA VPC Endpoint enables private connectivity between your VPC and supported AWS services without requiring an internet gateway, NAT device, VPN, or AWS Direct Connect. Traffic between your VPC and the service stays on the Amazon network.
Types
- Gateway endpoints: for S3 and DynamoDB; free; configured via route tables
- Interface endpoints (PrivateLink): for 100+ services; creates an ENI in your subnet with a private IP; costs per hour + per GB
Related AWS Services
Related Terms
An isolated virtual network within AWS where you launch resources, with full control over IP addressing, subnets, route tables, and network gateways.
Dividing a network into isolated segments (subnets, VPCs) to limit lateral movement and contain the blast radius of a security breach.
A security model where no user, device, or network is trusted by default - every access request is verified regardless of location, using identity-based policies and continuous validation.
Toc Consulting: AWS Security & Cloud Architecture
Securing your AWS estate?
Our team helps engineering teams secure and architect AWS the right way: assessment in week one, a prioritized action plan in week two.