AWS PrivateLink enables customers to access services hosted on AWS easily but securely by keeping all the network traffic within the AWS network.

You can use this capability to privately access services supported by AWS PrivateLink from your Amazon Virtual Private Cloud (VPC), without using public IPs, securely on the Amazon network. When you create endpoints for services that are available on AWS PrivateLink, these service endpoints will appear as Elastic Network Interfaces (ENIs) with private IPs in your VPCs. PrivateLink removes the need of whitelisting public IPs, or using an Internet Gateway, VPN, a Network Address Translation (NAT) device, or firewall proxies to connect to AWS services. Services available on PrivateLink also support private connectivity over AWS Direct Connect or AWS VPN, so that applications in your premises will be able to connect to these services via the Amazon private network. AWS services including Amazon Elastic Compute Cloud (EC2) API, Elastic Load Balancing (ELB) API, Kinesis Streams, EC2 Systems Manager (SSM), Service Catalog, and Amazon SNS are currently available on PrivateLink. To learn more about PrivateLink, read the

AWS PrivateLink also offers AWS partners the ability to offer services that look and feel like services that are hosted directly on a customer’s private network, accessible securely both from the cloud and customer’s premises via AWS Direct Connect and AWS VPN in a highly available and scalable manner. With AWS PrivateLink, you can setup your service that is fronted by a Network Load Balancer (NLB) and expose the service as private endpoints to other VPCs and other AWS customers, while the service receives connections and requests as normal. The traffic remains within the secure AWS network and does not need to traverse the Internet.