Using AppConfig with a Lambda in a private VPC with an Endpoint

Question

I'm using AppConfig with Lambda successfully for Lambdas running outside a VPC (using the AppConfig Lambda extension).
I'd like to also use AppConfig on Lambdas that need to run in a VPC.

Lambdas running in VPCs are able to use many AWS services by making use of VPC endpoints.
There doesn't appear to be an AppConfig VPC endpoint which is disappointing (I've tried using an SSM endpoint which - as expected - doesn't work for AppConfig).

It appears the only option would be to have the Lambda access AppConfig across the internet using a NAT gateway. This feels like overkill to access an AWS service.
Am I missing a way for a Lambda running in a VPC to privately access AppConfig or is an endpoint likely to be introduced for this service?

Thanks

Answer

app config doesn't have a vpc endpoint option as of now. Connection is only supported by internet.

Answer

As of December 6 2023, you can now use AWS PrivateLink to create a private connection between your VPC and AWS AppConfig. You can access AWS AppConfig as if it were in your VPC, without the use of an internet gateway, NAT device, VPN connection, or AWS Direct Connect connection. Instances in your VPC don't need public IP addresses to access AWS AppConfig.

Refer to the release notes - https://aws.amazon.com/about-aws/whats-new/2023/12/aws-appconfig-supports-privatelink/

Using AppConfig with a Lambda in a private VPC with an Endpoint

Relevant content