Connecting to Your AWS Services without the Internet
In addition to using the internet to access the VPC via an IGW, you can also connect to a VPN from your data center. This enables you to create a link between your on-premises network and your VPC without using the public internet.
Although an IGW added to your VPC or even a NAT gateway can help you connect to both the internet and the public IP addresses of AWS services such as S3 buckets and EC3 instances, there are many times when connecting to the different services via an endpoint protects the security of the connection rather than going over the public internet.
A VPC endpoint in AWS is a virtual network interface that allows you to privately access AWS services without using a public IP address or going over the public internet.
Historically, when connections had to be made to services such as DynamoDB or S3 buckets, they would need to use a NAT gateway or public IP address. In this manner, the traffic would be routed...
