AWS PrivateLink
Unlike other connectivity options, like VPC peering or TGWs, AWS PrivateLink is an endpoint connectivity service that privately connects VPCs to services as if those services were directly connected to the VPC. This service uses a managed network resource called a VPC endpoint. The use of a VPC endpoint allows you to connect private VPC resources to a service that exists outside the VPC without using a NAT gateway or internet gateway to reach it. This VPC endpoint service can be deployed into a VPC and made the target of traffic destined for the service at the other end of the endpoint by adding routes to the VPC subnet route table.
The VPC endpoint uses DNS for reachability, which means that DNS resolution within the VPC where PrivateLink resides is needed to provide the connectivity. This is orchestrated by AWS as part of the PrivateLink service, so no special steps are needed to utilize the VPC endpoint. However, it’s important to know that while the VPC...
