Hi, 1st of all there're different ways to evaluate differences between S3 Interface EP (Private link) & S3 GW EP .
- Reachability :
Private link : S3 Private link are available from Peer Link/ through Transit Gateway/ VPN / On Premises
GW EP : "Endpoint connections cannot be extended out of a VPC. Resources on the other side of a VPN connection, VPC peering connection, transit gateway, AWS Direct Connect connection, or ClassicLink connection in your VPC cannot use the endpoint to communicate with resources in the endpoint service." source: https://docs.aws.amazon.com/vpc/latest/userguide/vpce-gateway.html
PrivateLink for S3 is available in all AWS Regions. AWS PrivateLink is available at a per-GB charge for data processed and a hourly charge for interface VPC endpoints. Gateway EP is free of charge.
VPC Gateway EP are using 'public' EP S3Privatelink must use you must update your applications to use endpoint-specific DNS names.
Please note that Gateway EP & IEP can be used together as described below: (source : https://docs.aws.amazon.com/AmazonS3/latest/userguide/privatelink-interface-endpoints.html) Use Private link for on prem ressources / use GW EP S3 for VPC ressources.
- If your use case is to use Direct connect for S3 , You've got different options:
-Use Public Vif (and restrict /maintain the prefixes for S3 only based https://docs.aws.amazon.com/general/latest/gr/aws-ip-ranges.html) but it adds some complexity to setup
-Use EC2 Proxy Farm from On premises ressources (but need to scale/maintain operate them)
-Use S3 Private links
AWS PrivateLink ScalingAccepted Answerasked 2 years ago
Direct Connect Public VIFasked 7 months ago
hosted public VIF data transfer egress billing scenario clarificationAccepted Answerasked 3 years ago
How do I create a VPC Endpoint for S3 Interface?asked 8 months ago
in aws s3 java sdk 2, what is the class for S3 batch operation?asked 6 months ago
AWS PrivateLink use case validationAccepted Answerasked 2 months ago
DX Public VIF vs. Internet Path SelectionAccepted Answerasked 3 years ago
AWS PrivateLink for S3 VS DX public VIFAccepted Answerasked 2 years ago
PrivateLink to S3 from AzureAccepted AnswerEXPERTasked a year ago
Does the IP address created for PrivateLink Interface Endpoint can change?Accepted Answerasked 4 years ago