When to use an AWS S3 VPC endpoint

Discover the problem that the AWS VPC S3 endpoint solves, with a worked example of exactly how to set it up. Specifically, this video covers:

* what is an S3 VPC endpoint and why it's useful for accessing S3 from a private subnet with no internet access
* how to setup the endpoint including route table configuration
* why you might want to use the S3 VPC endpoint from a private subnet rather than using a NAT gateway

THIS VIDEO IN ARTICLE FORMAT

AWS GATEWAY ENDPOINTS

[shaunthomas]

Very good Session on how to configure vpc endpoint.

[Hari]

Very nice...explanation and your calmness...also thanks to clarify viewers questions in "consideration" section

[darrenchan]

Thank you for the straightforward and easy to follow tutorial.

[navinkmrsingh]

Thanks, man. You saved my life. The worst part of the problem was that it would just time out without giving any information and you kept guessing

[davidkeel]

Thanks Tom...it is so much easier to learn this by seeing it rather than reading it. Great tutorial.

[Mrnw]

Thank you Mr Gregory, appreciate you taking the time and effort to do this. Salute!

[julimax]

this video es very very good dude. thanks you

[VictorTheSnake]

Great video dude, very concise, thanks!

[iamaguest]

very good clip and clearly explained what it does. thanks!

[aldofiorentinisolis]

Very nice explanation ! I have subscribed

[alexolinux]

It's an useful explanation, thanks!!

[webbgroup]

I have a feva, and I gotta tell ya. I need more drums.

[himagreshmasuri]

Hi Tom, ur video and document helped me in vpc endpoint creation for s3, thanks alot and can u pls do the same way for vpc endpoint for dynamo db this will help us alot

[shaynereese]

I am wondering if anyone knows how to address an S3 bucket through an endpoint like this through MediaLive?

[marian]

Great explanation!. How would you enable access from other vpc’s?

[BR-lxpy]

Does the S3 traffic get routed through the public internet with this setup, assuming that the bucket and the instance are in the same region? Or can you same the egress fee plus have a local connection?

[manojalwani]

Does the existence of S3 Gateway VPC Endpoint in a VPC influence all the traffic to AWS S3 originating from all the service/resources within that VPC to use the VPC Endpoint? In other words, since you only selected the Private route table at time of VPC Endpoint creation, what would happen if you run that "aws s3 ls" command from the public EC2 instance? Does it also use the Gateway endpoint but eventually fail because it's Route table is not selected or does it uses the IGW and public internet connectivity for S3 endpoints?

With the "Interface" type VPC endpoints, if the Private DNS is enabled for the VPC endpoint, it results into all the traffic emanating from the VPC to use the Private DNS and depending on the Subnet and Security Group configurations of the VPC endpoint, it may or may not work. I am not sure about the "Gateway" type endpoints available for S3 and DynamoDB services.

[CJ-zxme]

laughing on the trolling part on s3 connection timeout, not sure why AWS not fixing it.

[joanale]

i make that and my ec2 can't list any bucket, is there any explicit role on the ec2 private instance?

[anshul]

Hey.. all good all well.. but while transitions to videos plz stop this DRUM noise. It doesnt look nice at all and its irritating