skilld
All skills
aws avatar

/configuring-vpc-endpoints-for-private-aws-service-access

@803cbf4
by Amazon Web Servicesaws/agent-toolkit-for-aws2.8k stars
337

Configures VPC endpoints (interface and gateway) for private AWS service access using AWS PrivateLink. Use when setting up secure private connectivity to S3, DynamoDB, and other AWS services without internet gateway, NAT device, or public IP addresses. Covers endpoint creation, security groups, route tables, and DNS configuration.

Ask your Agent

Use this Skill: https://skilld.dev/gh/aws/agent-toolkit-for-aws/configuring-vpc-endpoints-for-private-aws-service-access

This session only. Nothing lands on disk.

SKILL.md

≈98 tokens always: the name and description. ≈289 when used: this file. ≈2.3k more on demand in 1 file.

Configuring VPC Endpoints for Private AWS Service Access

Overview

Domain expertise for configuring VPC endpoints to enable private access to AWS services without routing traffic through the internet. Covers both gateway endpoints (S3, DynamoDB) and interface endpoints (EC2, SSM, Secrets Manager, etc.) powered by AWS PrivateLink.

Configure VPC endpoints

To create and configure VPC endpoints for private AWS service access, follow the procedure exactly. See VPC endpoints configuration procedure.

Troubleshooting

Endpoint not available

Check security group rules, subnet configurations, and service availability in the region.

DNS resolution issues

Verify DNS hostnames and DNS resolution are enabled on the VPC and that the DHCP options set has correct domain name servers.

Connection timeouts

Verify security group rules allow HTTPS traffic (port 443) and route tables are properly configured for gateway endpoints.

Policy restrictions

Review endpoint policies — default policies allow all access, but custom policies may be restrictive.

Source: SKILL.md on GitHub

Third-party checks

No alerts16d3 checks · Risk SAFE
  • Gen Agent Trust Hub16d

    This skill provides standard procedures for configuring AWS VPC endpoints and follows security best practices, such as leveraging AWS Secrets Manager and validating user-provided JSON policies. It is authored by a trusted vendor and performs administrative tasks consistent with its stated purpose.

  • Socket16d

    No alerts

  • Snyk16d

    Risk: LOW · No issues

Provenance

Signed by skilld at 803cbf4. This ties the file your Agent reads to that commit on GitHub. It does not review the instructions.

Last checked against GitHub yesterday.

Activeupdated 5 months ago

Capability

version
1

README badge

README badge for aws/agent-toolkit-for-aws/configuring-vpc-endpoints-for-private-aws-service-access