VPC Endpoint for AWS Account Factory for Terraform Management Account

Question

Can anyone explain why do we have so many VPC Endpoints in the AWS Account Factory for Terraform Management Account. It is incurring me cost, can I remove them and still operate AFT?

Answer

Hi, many customers have the requirement that no network traffic leaves their VPC and transits to the internet. This feature provides all the endpoints the AFT solution may need to connect to AWS services privately (without hitting the public endpoints).

You can turn the endpoints off by adding this variable to your AFT module deployment, aft_vpc_endpoints = false

You can turn the endpoints off by adding this variable to your AFT module deployment, `aft_vpc_endpoints = false`

VPC Endpoint for AWS Account Factory for Terraform Management Account

Relevant questions

Terraform AFT / Rename an account

Which AWS Account or Organization Unit should be Account Management delegated admin

Does AWS Control Tower have integrations with the AWS VPC IPAM service?

Control Tower / Account Factory / Email Validation

Amazon DynamoDB across account access with VPC endpoints

IAM as code - centralize the management of IAM roles and policies in a multi-account organization

Billing for cross-account VPC peering

Control Tower Account Factory for Terraform (AFT) not creating accounts as expected