VPC endpoints and their user cases
VPC endpoints in AWS provide secure private connectivity between your VPC and supported AWS services. Once a VPC endpoint is created, it acts as a starting point for traffic, which is initiated against the respective AWS service. VPC endpoints come in two flavors:
- Interface endpoints: When an interface endpoint is created, an Elastic network interface with a private IP address from the IP address range of your subnet is allocated to an endpoint. The private IP address serves as an entry point for the traffic destined against the respective AWS service.
- Gateway endpoints: Unlike interface endpoints, gateway endpoints are associated with an entire VPC as opposed to individual subnets. A gateway endpoint creates a gateway and is added to the route table for the traffic destined to the respective AWS service. Gateway endpoints are currently only supported for S3 and DynamoDB.
VPC endpoints offer enhanced privacy since all the traffic...