1 Answer
- Newest
- Most votes
- Most comments
2
Hi, many customers have the requirement that no network traffic leaves their VPC and transits to the internet. This feature provides all the endpoints the AFT solution may need to connect to AWS services privately (without hitting the public endpoints).
You can turn the endpoints off by adding this variable to your AFT module deployment, aft_vpc_endpoints = false
Hi! I couldn't find the aft_vpc_endpoints variable in any of the AFT repositories. Could you point me to where it’s defined or how it should be used?
@carlos - The note of the variable is listed here https://github.com/aws-ia/terraform-aws-control_tower_account_factory?tab=readme-ov-file#input_aft_vpc_endpoints.
Relevant content
- asked 4 months ago

Hi! Did you manage to sort this out? I'm also looking into the aft_vpc_endpoints setup and wondering the same.