Enable private DNS only for inbound endpoint

0

Dear Team - As per, https://aws.amazon.com/blogs/storage/introducing-private-dns-support-for-amazon-s3-with-aws-privatelink/ and https://aws.amazon.com/about-aws/whats-new/2023/03/amazon-s3-private-connectivity-on-premises-networks/,

These options allow you to advantage of the lowest-cost private network path without having to make code or configuration changes to your clients.

Before this also, we could create the interface S3 endpoint and was able to connect from on-prem through resolver endpoint. At the same time, as per my understanding, we were able to connect S3 internally from VPC through Gateway endpoint as per old blog https://aws.amazon.com/blogs/networking-and-content-delivery/secure-hybrid-access-to-amazon-s3-using-aws-privatelink/.

**So question is, how the new "Enable private DNS only for inbound endpoint" feature is cost effective compare to without this feature ? **

1개 답변
0
수락된 답변

This is because you don’t pay for S3 gateways and I believe if you had S3 endpoints and a gateway, the endpoints would override the gateway.

With this new feature, you can run both endpoints and Gateways where hosts in a VPC use a gateway and your on prem uses the endpoints.

You pay for transfer over endpoints where you do not over the gateway. This is where the costs differ. By using Gateway in the VPC you do not need to pay for transfers.

profile picture
전문가
답변함 9달 전
  • Thanks a lot for the Answer. Do you have reference document which state below

    " if you had S3 endpoints and a gateway, the endpoints would override the gateway."

  • Yes, it’s in the 2nd link of your question. Technically it would override the gateway, You’d have to target the s3 buckets using the custom dns names assigned to your endpoints and access to buckets would be via these endpoints. If you do not use custom names then the gateway would would route public ip addresses for s3 buckets via the s3 gateway. I never included this in my answer, apologies.

    The enablement of DNS names allows on prem to resolve all s3 buckets to the endpoint. Because you cant route transitively to an s3 gateway you have to use endpoints

  • thank you for the reply

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인