4 ms·
Having experienced the joy of setting up VPC, subnets and PrivateLink endpoints the whole thing just seems absurd. They spent the effort of branding private VP
by afandian 1y ago
Having experienced the joy of setting up VPC, subnets and PrivateLink endpoints the whole thing just seems absurd.
They spent the effort of branding private VPC endpoints "PrivateLink". Maybe it took some engineering effort on their part, but it should be the default out of the box, and an entirely unremarkable feature.
In fact, I think if you have private subnets, the only way to use S3 etc is Private Link (correct me if I'm wrong).
It's just baffling.
- time0ut 1y agoYou can provision gateway endpoints for S3 and DynamoDB. They are free and considered best practice. They are opt-in though, but easy to enable.
- mdaniel 1y agoAnd ECR, which I would guess impacts more folks than DynamoDB https://docs.aws.amazon.com/AmazonECR/latest/userguide/vpc-endpoints.html#ecr-setting-up-vpc-create https://docs.aws.amazon.com/AmazonECR/latest/userguide/vpc-e... And, as as added benefit, they distinguish between "just pull" and "pull and push" which is nice
- afandian 1y agoTrue, I forgot that. But depending on services you still have to have some Gateway and some Interface endpoints.