Skill Store 33

Configuring Vpc Endpoints For Private Aws Service Access

Configures VPC endpoints (interface and gateway) for private AWS service access using AWS Private…

by aws · Apache-2.0

The skill

Configures VPC endpoints (interface and gateway) for private AWS service access using AWS PrivateLink. Use when setting up secure private connectivity to S3, DynamoDB, and other AWS services without internet gateway, NAT device, or public IP addresses. Covers endpoint creation, security groups, route tables, and DNS configuration.

Configuring VPC Endpoints for Private AWS Service Access

Overview

Domain expertise for configuring VPC endpoints to enable private access to AWS services without routing traffic through the internet. Covers both gateway endpoints (S3, DynamoDB) and interface endpoints (EC2, SSM, Secrets Manager, etc.) powered by AWS PrivateLink.

Configure VPC endpoints

To create and configure VPC endpoints for private AWS service access, follow the procedure exactly. See VPC endpoints configuration procedure.

Troubleshooting

Endpoint not available

Check security group rules, subnet configurations, and service availability in the region.

DNS resolution issues

Verify DNS hostnames and DNS resolution are enabled on the VPC and that the DHCP options set has correct domain name servers.

Connection timeouts

Verify security group rules allow HTTPS traffic (port 443) and route tables are properly configured for gateway endpoints.

Policy restrictions

Review endpoint policies — default policies allow all access, but custom policies may be restrictive.

Use this skill

Connect your agent to the Skill Store MCP server and ask for it by ref: aws/configuring-vpc-endpoints-for-private-aws-service-access-34329364601.

Download SKILL.md · Markdown version

Details

Publisher
aws
Category
Software Development › DevOps & cloud
License
Apache-2.0
Updated
2026-10-16

References

More from aws

Related skills

  • Enabling Lambda Vpc Internet Access Enables internet access for AWS Lambda functions deployed in VPC subnets by creating NAT Gateway…
  • Azure Private Link Expert knowledge for Azure Private Link development including best practices, decision making, ar…
  • Sitetositevpn Configures AWS Site-to-Site VPN: creating an IPsec VPN connection between an on-premises network…
  • Directconnect Configures AWS Direct Connect: choosing a connection model (dedicated, hosted, or a link aggregat…
  • Aws Vpc Design and implement VPCs and networking.