Basic Information
| Field | Details |
|---|---|
| English name | AWS PrivateLink & VPC Endpoints |
| Full name | AWS PrivateLink & VPC Endpoints |
| Chinese description | 私有服务访问 |
| Japanese description | プライベートサービス接続 |
| Exam frequency | ⭐⭐⭐⭐⭐ |
| Often confused with | NAT Gateway / VPC Peering / Site-to-Site VPN |
In one sentence
Private access to AWS or endpoint services from a VPC without traversing the public internet.
Key points
- Gateway Endpoints support S3 and DynamoDB and are configured in route tables.
- Interface Endpoints create private ENIs and use AWS PrivateLink for many services.
- Endpoint policies, security groups, DNS, and service permissions still control access.
Exam takeaway
An endpoint provides a private path; it does not automatically grant authorization.