2 Antworten
- Neueste
- Die meisten Stimmen
- Die meisten Kommentare
3
Its definitely recommended to use VPC endpoints (Interface or Gateway) where applicable. Not only will it reduce your NAT gateway bill but it is also good option from Security posture perspective. When your applications use VPC endpoints traffic stays on AWS backbone network and does not travel public Internet. When a workload architecture uses VPC endpoints, the application benefits from the scalability, resilience, security, and access controls native to AWS services.
0
Thanks. That's what I was thinking but I just wanted re-assurance.
beantwortet vor einem Jahr
Relevanter Inhalt
- AWS OFFICIALAktualisiert vor 5 Monaten
- AWS OFFICIALAktualisiert vor 6 Monaten
Note that traffic using public IP addresses between AWS endpoints (so, AWS services or EC2 to AWS services - anything that uses AWS public IP addresses) stays on the Amazon network. It does not traverse the public internet. This is mentioned in the VPC FAQ. Yes, public IP addresses mean you can connect to the public internet but it doesn't mean that you have to.