AWS PrivateLink for Amazon S3 is Now Generally Available

At AWS re:Invent, we pre-announced that AWS PrivateLink for Amazon S3 was coming soon, and soon has arrived — this new feature is now generally available. AWS PrivateLink provides private connectivity between Amazon Simple Storage Service (Amazon S3) and on-premises resources using private IPs from your virtual network.

Way back in 2015, Amazon S3 was the first service to add a VPC endpoint; these endpoints provide a secure connection to Amazon S3 that does not require a gateway or NAT instances. Our customers welcomed this new flexibility but also told us they needed to access Amazon S3 from on-premises applications privately over secure connections provided by AWS Direct Connect or AWS VPN.

Our customers are very resourceful and by setting up proxy servers with private IP addresses in their Amazon Virtual Private Clouds and using gateway endpoints for Amazon S3, they found a way to solve this problem. While this solution works, proxy servers typically constrain performance, add additional points of failure, and increase operational complexity.

We looked at how we could solve this problem for our customers without these drawbacks and PrivateLink for S3 is the result.

With this feature you can now access Amazon S3 directly as a private endpoint within your secure, virtual network using a new interface VPC endpoint in your Amazon VPC. This extends the functionality of existing gateway endpoints by enabling you to access Amazon S3 using private IP addresses. API requests and HTTPS requests to Amazon S3 from your on-premises applications are automatically directed through interface endpoints, which connect to Amazon S3 securely and privately through PrivateLink.

Interface endpoints simplify your network architecture when connecting to Amazon S3 from on-premises applications by eliminating the need to configure firewall rules or an internet gateway. You can also gain additional visibility into network traffic with the ability to capture and monitor flow logs in your VPC. Additionally, you can set security groups and access control policies on your interface endpoints.

Available Now
PrivateLink for S3 is available in all AWS Regions. AWS PrivateLink is available at a low per-GB charge for data processed and a low hourly charge for interface VPC endpoints. We hope you enjoy using this new feature and look forward to receiving your feedback. To learn more, check out the PrivateLink for S3 documentation.

Try out AWS PrivateLink for Amazon S3 today, and happy storing.