Configuring Vpc Endpoints For Private Aws Service Access

by aws188af2f810ceNo license2.8K starsListed Oct 8, 2026Updated Oct 8, 2026Repository updated today

Configures VPC endpoints (interface and gateway) for private AWS service access using AWS PrivateLink. Use when setting up secure private connectivity to S3, DynamoDB, and other AWS services without internet gateway, NAT device, or public IP addresses. Covers endpoint creation, security groups, route tables, and DNS configuration.

Instructions onlyDevOps & Cloud
AI-generated overview

Guides configuring AWS VPC endpoints for private access to services like S3 and DynamoDB without internet routing.

What it does
Provides domain guidance for creating and configuring AWS VPC endpoints, covering both gateway endpoints for S3 and DynamoDB and interface endpoints powered by AWS PrivateLink. It walks through endpoint creation, security groups, route tables, and DNS settings, and includes troubleshooting for endpoint availability, DNS resolution, connection timeouts, and endpoint policies. The detailed procedure lives in a referenced document.
When to use it
Use when setting up private connectivity from a VPC to AWS services without an internet gateway, NAT device, or public IP addresses. Also useful when diagnosing VPC endpoint connectivity, DNS, or policy problems.
Requirements
Instructions only; no scripts. Requires an AWS environment with VPC, subnet, security group, route table, and DNS configuration access, plus the referenced procedure document.

Configuring VPC Endpoints for Private AWS Service Access

Overview

Domain expertise for configuring VPC endpoints to enable private access to AWS services without routing traffic through the internet. Covers both gateway endpoints (S3, DynamoDB) and interface endpoints (EC2, SSM, Secrets Manager, etc.) powered by AWS PrivateLink.

Configure VPC endpoints

To create and configure VPC endpoints for private AWS service access, follow the procedure exactly. See VPC endpoints configuration procedure [blocked].

Troubleshooting

Endpoint not available

Check security group rules, subnet configurations, and service availability in the region.

DNS resolution issues

Verify DNS hostnames and DNS resolution are enabled on the VPC and that the DHCP options set has correct domain name servers.

Connection timeouts

Verify security group rules allow HTTPS traffic (port 443) and route tables are properly configured for gateway endpoints.

Policy restrictions

Review endpoint policies — default policies allow all access, but custom policies may be restrictive.

Source and attribution

Source:aws/agent-toolkit-for-awsinskills/specialized-skills/networking-and-content-delivery-skills/configuring-vpc-endpoints-for-private-aws-service-accessat commit188af2f

License: No license

Content belongs to its original authors. SourceWeft indexes it from a public repository.

Report or request removal

More from aws/agent-toolkit-for-aws

Rds Oss

aws

Advises on Amazon RDS MySQL, MariaDB and PostgreSQL instance creation, upgrades, commitment pricing, RDS Proxy and Blue/Green deployments.

Includes scripts
DevOps & Cloud2.8Kupdated today

Exporting Rds To S3

aws

Guides exporting Amazon RDS or Aurora snapshots to Amazon S3 as Parquet, covering IAM, KMS, monitoring and verification.

DevOps & Cloud2.8Kupdated today

Creating Amazon Aurora Db Cluster With Instances

aws

Guides creation of an Amazon Aurora cluster with instances, including Secrets Manager password handling.

DevOps & Cloud2.8Kupdated today

Debugging Lambda Timeouts

aws

Diagnoses AWS Lambda timeout failures by analyzing configuration, CloudWatch logs and metrics, networking, cold starts, and dependencies.

DevOps & Cloud2.8Kupdated today

Waf

aws

Routes AWS WAF configuration tasks to per-task reference procedures for filtering web traffic.

Security2.8Kupdated today

Creating Api Gateway Stage

aws

Creates and configures AWS API Gateway stages with logging, tracing, throttling, WAF and IAM roles.

DevOps & Cloud2.8Kupdated today

More in DevOps & Cloud

Playwright Devops

microsoft

Featured

DevOps workflows for Playwright: analyze GitHub Actions failures for the last commit on main and fetch failed job logs.

Includes scripts
DevOps & Cloud97Kupdated today

M5 Onboard

anthropics

Featured

Provisions M5Stack ESP32 boards by detecting them on USB, flashing UIFlow 2.0 firmware, and installing a MicroPython app bundle.

DevOps & Cloud37Kupdated today

Yeet

openai

Featured

Stages, commits, pushes, and opens or updates a GitHub pull request in one flow using the GitHub CLI.

DevOps & Cloud27Kupdated 4 weeks ago

Runbook

anthropics

Featured

Creates or updates step-by-step operational runbooks for recurring tasks, including troubleshooting, rollback and escalation.

DevOps & Cloud27Kupdated today

Incident Response

anthropics

Featured

Guides an incident response workflow: severity triage, status updates, mitigation tracking, and blameless postmortems.

DevOps & Cloud27Kupdated today

Deploy Checklist

anthropics

Featured

Generates a pre-deployment readiness checklist covering pre-deploy, deploy, post-deploy and rollback triggers.

DevOps & Cloud27Kupdated today
Configuring Vpc Endpoints For Private Aws Service Access Agent Skill | SourceWeft