PrivateLink

Introduction

• Exposing service endpoints in a private VPC. (A more secured VPC Peering)

• Most secure & scalable way to expose a service to 1000s of VPC (owned by you or other accounts)

• Doesn't require VPC Peering, IGW, NAT, Route Tables.

• Good for only want to expose part of the service but not entire VPC to other VPC.

Usage

• Setup a NLB in provider VPC, an ENI in consumer VPC

• For fault tolerance, can set NLB in multi-AZ, and ENI in multi-AZ.

PrivateLink