AWS Builder Center is the official home for builders on AWS. Share and read what others are working on, follow people who inspire you, explore training and workshops, and find tools to support what you're building.
Inter-Region access to endpoint services
Dear Team - As per last use case Inter-Region access to endpoint services description in https://docs.aws.amazon.com/whitepapers/latest/aws-privatelink/use-case-examples.html, the ENI of interface endpoint circled in red should not be in Consumer VPC of remote region ?
- Newest
- Most votes
- Most comments
VPCs are regional constructs, and so are VPC endpoints. A VPC endpoint can only be created in the same region where the resource used to deliver it (NLB in this case) resides. Even more specifically for VPC interface endpoints, the ENIs of the endpoint must each reside in the same availability zone as one of the ENIs of one of the NLBs used to provide the VPC endpoint service.
You can, however, access a VPC interface endpoint in a remote region over an inter-region VPC peering connection (or several other means), and that's the scenario illustrated in the diagram.
Note that starting Nov 26 2024 cross-region PrivateLink is now supported.
https://aws.amazon.com/about-aws/whats-new/2024/11/aws-privatelink-across-region-connectivity/
Relevant content
asked 3 years ago
asked 5 months ago
Hi, Please note that with the release of cross-region PrivateLink in Nov 2024, this answer is no longer correct. Thank you!