如何通过VPC端点禁用对非AWS服务的访问
0
【以下的问题经过翻译处理】 是否有办法防止在AWS PrivateLink中创建非AWS服务的VPC端点？客户想要白名单PrivateLink，并确保没有人可以使用PrivateLink连接到非AWS服务。IAM策略中的条件键[ec2:VpceServiceName]（https://docs.aws.amazon.com/vpc/latest/userguide/vpc-endpoints-iam.html）应该可以实现，但这会阻止管理员为非AWS服务创建任何端点吗？
1 Answer
- Newest
- Most votes
- Most comments
0
【以下的回答经过翻译处理】 您可以在“CreateVpcEndpoint”端点的权限条件中添加一个条件，即ServiceName不包含“com.amazonaws.vpce”，以阻止创建面向客户创建的端点服务的端点。
Relevant content
- asked a year ago
- asked a year ago
- Accepted Answerasked 10 months ago
- Accepted Answerasked 2 months ago
AWS OFFICIALUpdated 2 years ago- How do I delete my Network Load Balancer that's associated with VPC endpoint services (PrivateLink)?AWS OFFICIALUpdated 2 years ago
- AWS OFFICIALUpdated 2 years ago
- AWS OFFICIALUpdated 7 months ago
