AWS Builder Center is the official home for builders on AWS. Share and read what others are working on, follow people who inspire you, explore training and workshops, and find tools to support what you're building.
Best approach to isolate Amazon SageMaker in a VPC without internet access?
What are the best practices for allowing SageMaker to access datasets in S3 without exposing the VPC to the internet? Should I use only Interface endpoints (AWS PrivateLink), or are there scenarios where Gateway endpoints are more efficient?
- Language
- English
asked 2 years ago385 views
- Newest
- Most votes
- Most comments
From the documentation
Amazon S3 supports both gateway endpoints and interface endpoints. With a gateway endpoint, you can access Amazon S3 from your VPC, without requiring an internet gateway or NAT device for your VPC, and with no additional cost. However, gateway endpoints do not allow access from on-premises networks, from peered VPCs in other AWS Regions, or through a transit gateway. For those scenarios, you must use an interface endpoint, which is available for an additional cost.
