How do I create a VPC Endpoint for S3 Interface?

1

All,

I am trying to create an S3 interface endpoint.

  1. I select endpoint from the VPC endpoint GUI

  2. There was an error creating VPC S3 interface endpoint "Enabling private DNS requires both enableDnsSupport and enableDnsHostnames VPC attributes set to true for vpc-049a6e29a22695b61"

  3. So I enable DNS on the VPC

  4. Now I try creating the VPC S3 Interface endpoint again, and get this "There was an error creating VPC endpoint Private DNS can't be enabled because the service com.amazonaws.us-east-1.s3 does not provide a private DNS name."

Feel like I am stuck in a loop here. Any idea what I am doing wrong?

asked 2 years ago7589 views
1 Answer
4

You are receiving above because unfortunately, the Interface Endpoints for S3 don't support Private DNS. [1]. This feature is enabled by default in the creation settings. If your intentions are to access S3 from on premises or another region, a slight change needs to be made in the creation process. Please see the below steps in order to successfully create your S3 interface endpoint [2]:

================= S3 Interface endpoint

-Return to your VPC -Select > Endpoints, Create Endpoint. -Select > AWS service name (S3), Type (Interface) -After making your VCP selection > there is a drop down "Additional settings" > deselect "Enable DNS name" (Selected by Default) -Select > your Subnet/s and continue as normal to complete the endpoint.

*Note: S3 interfaces use public, interface specific Regional and Zonal DNS names that are created when you make an S3 interface endpoint. These DNS names are resolved to the private IP's of your respective subnet ENI's within your VPC. Which can be accessed securely within the AWS network via these Private IPs. There is no need to configure a DNS resolver. I have also listed a link that elaborates on the comparison of S3 interface and gateway endpoints [3].

[1]Private DNS for interface endpoints https://docs.aws.amazon.com/vpc/latest/privatelink/vpce-interface.html#vpce-private-dns

[2] Creating an Interface Endpoint https://docs.aws.amazon.com/vpc/latest/privatelink/vpce-interface.html#create-interface-endpoint

[3] S3 Endpoint comparison https://docs.aws.amazon.com/AmazonS3/latest/userguide/privatelink-interface-endpoints.html#types-of-vpc-endpoints-for-s3

AWS
SUPPORT ENGINEER
answered 2 years ago
profile picture
EXPERT
Kallu
reviewed 2 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions