Keep Your Network Traffic in AWS with VPC Endpoints | Overview and Tutorial

[@dashmasterful]

Finally! Someone that could explain this concept clearly and concisely. Thanks!

[@saptarshiganguly1683]

Great tutorial as always. Looking forward to learning more concepts related to VPC like PrivateLink, Transit gateway, etc from you.

[@pablogonzalezrobles4429]

Great video. Small detail to mention. About the diagram, vpce is set at subnet level, not vpc level as Internet gateway. It was confirmed on the demo.

[@BeABetterDev]

Thanks for pointing this out!

[@shubhammahajan9117]

Didn’t get you. Could you please elaborate?

[@alexrusin]

​@shubhammahajan9117 There are two types of VPC endpoints: interface and gateway. The interface vpc endpoint has ENI, and you have to associate a security group with it. It is like an EC2 - you have to place it inside a subnet. The gateway vpc endpoint works similar to Internet Gateway - you have to route traffic to it in a route table. The diagram shows the gateway vpc endpoint. However, in the demo the interface vpc endpoint was shown. That's why Pablo is saying that the endpoint in the diagram should be set at the private subnet level rather than the VPC level.

[@likithabh3944]

Good one, you made it very clear and easy to understand!

[@bsrameshonline]

Super explanation on how AWS endpoint is used

[@mathewkargarzadeh3158]

Amazing Tutorial on VPC Endpoints. you are the best !!!

[@Reflekt0r]

Thank you, thank you, thank you! Finally I understood the concept! 🙏🙏🙏

[@shaunypie99]

Excellent demo and explanation. Thanks buddy 🙂

[@BeABetterDev]

Glad you liked it!

[@HassnainKhizar]

Great explanation

[@alexrusin]

Great tutorial as usual! Thank you. I wonder if you can do a video about VPC endpoint type gateway. I think it would be useful for people who use S3 buckets and DynamoDB.

[@AliNaghipourfar-o3f]

Thank you so much for this great video

[@mjamaltv]

THANK YOU THANK YOU THANK YOU THANK YOU THANK YOU THANK YOU!!!!!!!!

[@thecyrusj13]

Pretty good. It would be a little better if the function tested at the end were a little more solid. For example maybe have an app hosted by S3 that that uses the endpoint or something like that to prove that it works. But I'm going to do this anyway.

[@JohnS-er7jh]

Thanks for posting the video. I didn't realize the AWS VPC EndPoint also has a Security Group, I thought Security Groups were only attached to EC2 Instances.

[@BeABetterDev]

You're very welcome! Yes Security Groups can be attached to many different types of infrastructure (including even load balancers!). Whenever you have a connection problem its always a good idea to check the security group configuration first.

[@ImaneElouadi-eq1zc]

Loved it ,thanks :)

[@LinuxForLife]

Nice! Thanks.

[@BeABetterDev]

Welcome!

[@RajKeerthi-p2f]

I got a question here. You did not shown how did the VPC endpoint had accessed the s3? this was the question the video was trying to solve right? sorry If I have asked the wrong question. Thank you.

[@indiraparasa6805]

Helpful vedio ❤

[@tvvuday]

Very good video, Nice content, it helps me on learning new scenarios, Thanks, @Be A Better Dev

[@BeABetterDev]

Glad to help!

[@hassanelkhouli]

Amazing !

[@BeABetterDev]

Thank you! Cheers!

[@digitnomad]

@12, I like "diligently refreshing..." :)

[@BuildOnAWS]

Great, comprehensive demo! Thank you

[@RABWA333]

Thanks a lot

[@AfikAfikAfik]

Hi there, thank you for another great video! Could you please extend more about the "Service" who been chosen on 9:57. I'm not sure what is the meaning of this. Thanks!

[@kuldipsatpute9866]

Great job… But I’ve question… If this instant is isolated then how can we get updates and install software… if we assign NAT gateway the how this endpoint will react…

[@DevOps-Cloud]

Awesome, but what if VPC is in another account and bucket in another account?

[@aliamir2473]

can you make a video on autoscaling please

[@scottboggs2364]

I have seen many vids like this about setting up PL to S3, but NO ONE makes it clear how to use the endpoint. How do you make a S3 CLI connection to this endpoint? How are buckets for multiple accounts accessed? etc.

[@DF-ss5ep]

I don't know, I'm still learning it, but my guess is that the DNS will resolve to an IP inside AWS's network. The request for that IP will follow the route to the table and then to the endpoint. It should be easy to check, anyway, since the request is not supposed to work without it on a private subnet.

[@themarksman1]

@@DF-ss5ep DNS ‘ll resolve to an ENI within the VPC instead of Public IP of the S3 bucket. Needless to say any traffic arriving at this ENI will be tunneled within AWS network (without traversing Internet) to the S3 bucket. That is how Private link works. It sets up a tunnel from ENI in your VPC to S3/any AWS service. No RouteTables are used in case of Interface Endpoints. RouteTables are used only for Gateway Endpoints which is available for select AWS services like S3, DynamoDB. These services use well-known IP address range that can be checked with a Prefix-list. Then a RouteTable entry is made with as the .

[@adrian_franczak]

What about connecting from internet to lambda and lambda save data to database in vpc - should I put lambda also in vpc?

[@leamon9024]

Awesome video! Is there any chance to talk about AWS graviton which can be used in multi-arch docker container for better performance and more cost effective in AWS ECS/EKS/Lambda? Thanks!

[@OmarAli-gm5lx]

Great video! how do you produce your diagrams?

[@BeABetterDev]

Thank you! All in Powerpoint :)

[@OmarAli-gm5lx]

@@BeABetterDev wow please do a tutorial when you can i would pay for this

[@bibhu_pala]

How to test after setting this?

[@jytan740]

can Amazon linux ec2 talk to s3 by default with the s3 role assigned to ec2? (not sure by default is there a s3 vpc endpoint)

[@vlajov]

Great stuff as always! Thanks for showing demo! For the first part I have a question: In case we need only one EC2 instance to connect securely and with no cost to S3, we can use interface VPC endpoint or Gateway endpoint is the only option?

[@tibistibi]

the security groups are connected to each other, how would this be working when you have vpc's in two accounts connected via a peering connection?

[@justin_t]

What is the service name for parameter store? is it kms?

[@danielhooverc]

It seems like my instance in a private subnet can still access an S3 bucket even though I haven't set security groups for the endpoint and this instance. How can that be?

[@datajake2742]

I'm probably confused but why not just one security group?

[@MyRonniej]

what's the purpose of the lambda in this case

[@joshuaspector8182]

I was wondering this too

[@davidalexander8786]

10:15 "states" because steps functions are state-machines

[@shubhammahajan9117]

What is the exact difference between VPC endpoint and Nat gateway then? When to use what?

[@madrag]

vpc endpoint allow you to communicate to/from aws services (depends on the endpoint type) via their backbone network, nat gateway is well just nat gateway and act as one.

[@alexrusin]

You use NAT gateway if you want your services placed in a private subnet to access the internet. Make API calls, for example.

[@user-if2kq8nh8m]

Be careful though, VPC endpoints do have a bit of a steep price

[@MosesAbel-n5o]

945 Dale Brooks

[@catchroniclesbyanik]

Incomplete tutorial plus you put more emphasis on setting up security group which was very distracting