SSL Certificate with interface endpoints?

Hi All,

I have S3 glacier in an AWS account that is consumed by a python program on-premise. Direct connect connectivity is already established. The S3 service is exposed through a VPC interface endpoint and is accessed using privatelink.

In the Python program, I am using a https URL to access S3, something like '*.vpce.amazonaws.com'. Public access to the S3 service through the internet has been disabled. It is only accessible through direct connect.

Do I need an SSL certificate to access the service? If I do, should I purchase/generate one or will AWS provide the SSL cert I can use to call the service?

Thanks in advance.