At AWS re:Invent, we pre-announced that AWS PrivateLink for Amazon S3 was coming quickly, and shortly has arrived — this new characteristic is now typically out there. AWS PrivateLink supplies personal connectivity between Amazon Easy Storage Service (S3) and on-premises sources utilizing personal IPs out of your digital community.
Method again in 2015, S3 was the primary service so as to add a VPC endpoint; these endpoints present a safe connection to S3 that doesn’t require a gateway or NAT situations. Our prospects welcomed this new flexibility but additionally advised us they wanted to entry S3 from on-premises purposes privately over safe connections supplied by AWS Direct Join or AWS VPN.
Our prospects are very resourceful and by organising proxy servers with personal IP addresses of their Amazon Digital Non-public Clouds and utilizing gateway endpoints for S3, they discovered a option to remedy this downside. Whereas this answer works, proxy servers usually constrain efficiency, add extra factors of failure, and enhance operational complexity.
We checked out how we may remedy this downside for our prospects with out these drawbacks and PrivateLink for S3 is the outcome.
With this characteristic now you can entry S3 instantly as a non-public endpoint inside your safe, digital community utilizing a brand new interface VPC endpoint in your Digital Non-public Cloud. This extends the performance of current gateway endpoints by enabling you to entry S3 utilizing personal IP addresses. API requests and HTTPS requests to S3 out of your on-premises purposes are robotically directed by way of interface endpoints, which connect with S3 securely and privately by way of PrivateLink.
Interface endpoints simplify your community structure when connecting to S3 from on-premises purposes by eliminating the necessity to configure firewall guidelines or an web gateway. You too can achieve extra visibility into community visitors with the flexibility to seize and monitor circulation logs in your VPC. Moreover, you may set safety teams and entry management insurance policies in your interface endpoints.
Out there Now
PrivateLink for S3 is offered in all AWS Areas. AWS PrivateLink is offered at a low per-GB cost for information processed and a low hourly cost for interface VPC endpoints. We hope you get pleasure from utilizing this new characteristic and stay up for receiving your suggestions. To study extra, take a look at the PrivateLink for S3 documentation.
Check out AWS PrivateLink for Amazon S3 at present, and glad storing.