Configuring Vpc Endpoints For Private Aws Service Access
This handles the setup for VPC endpoints so your AWS resources can talk to services like S3, DynamoDB, and Secrets Manager without going through the internet. It covers both gateway endpoints and interface endpoints via PrivateLink, including the security group rules, route table configs, and DNS setup that always trip people up. The troubleshooting section hits the common gotchas around DNS resolution and endpoint policies. You'd reach for this when you need to lock down service access for compliance or just want to avoid NAT gateway costs and keep everything on AWS's backbone network.
- skills.sh installs
- 6.8K
- GitHub stars
- 3.4K
- last updated
- Aug 21, 2026
Install
$ npx -y skills add aws/agent-toolkit-for-aws --skill configuring-vpc-endpoints-for-private-aws-service-access --agent claude-codeInstalls into .claude/skills of the current project.
Files
Configuring VPC Endpoints for Private AWS Service Access
Overview
Domain expertise for configuring VPC endpoints to enable private access to AWS services without routing traffic through the internet. Covers both gateway endpoints (S3, DynamoDB) and interface endpoints (EC2, SSM, Secrets Manager, etc.) powered by AWS PrivateLink.
Configure VPC endpoints
To create and configure VPC endpoints for private AWS service access, follow the procedure exactly. See VPC endpoints configuration procedure.
Troubleshooting
Endpoint not available
Check security group rules, subnet configurations, and service availability in the region.
DNS resolution issues
Verify DNS hostnames and DNS resolution are enabled on the VPC and that the DHCP options set has correct domain name servers.
Connection timeouts
Verify security group rules allow HTTPS traffic (port 443) and route tables are properly configured for gateway endpoints.
Policy restrictions
Review endpoint policies — default policies allow all access, but custom policies may be restrictive.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageDetails
- Repository
- github.com/aws/agent-toolkit-for-aws
- Categories
- Backend & APIs, Security, AI & Agent Building, Cloud & Infrastructure, Databases
- First seen
- Jun 3, 2026
More from aws/agent-toolkit-for-aws
All 56- Debugging Lambda Timeouts6.8K
- Setting Up Cloudwatch Alarm Notifications6.8K
- Launching Ec2 Instance With Best Practices6.8K
- Troubleshooting S3 Files6.7K
- Creating Api Gateway Stage6.7K
- Setting Up Ec2 Instance Profiles6.6K
- Creating Production Vpc Multi Az6.6K
- Signing In To Aws6.6K
- Aws Transform6.5K
- Connecting Vpcs With Peering6.5K
- Enabling Lambda Vpc Internet Access6.5K
- Exporting Rds To S36.5K
- Setting Up Cloudtrail Multi Region6.5K
- Routing Traffic With Route53 And Cloudfront6.5K
- Creating Amazon Aurora Db Cluster With Instances6.4K
- Troubleshooting Efs6.3K
- Aws Lambda Durable Functions6.2K
- Aws Lambda Managed Instances6.2K
- Aws Cleanrooms6.1K
- Aws Lambda Microvms6.1K
- Amazon Aurora Postgresql6K
- Querying Aws S36K
- Amazon Opensearch Service6K
- Aws Blocks5.9K
Recommended
More Backend & APIs
context7-mcpupstash/context7This skill should be used when the user asks about libraries, frameworks, API references, or needs code examples. Activates for setup questions, code generation6.8Kskills.sh installs
sql-projeffallan/claude-skillsOptimizes SQL queries, designs database schemas, and troubleshoots performance issues. Use when a user asks why their query is slow, needs help writing complex 6.8Kskills.sh installs
clickhouse-managed-postgres-rcaclickhouse/agent-skillsMUST USE when investigating performance issues on a ClickHouse-managed Postgres instance. Provides an evidence-based RCA workflow that scrapes the Prometheus en6.8Kskills.sh installs
wp-performancewordpress/agent-skillsUse when investigating or improving WordPress performance (backend-only agent): profiling and measurement (WP-CLI profile/doctor, Server-Timing, Query Monitor v6.7Kskills.sh installs
opentelemetrygrafana/skillsInstrument any app with OpenTelemetry and ship metrics / logs / traces to Grafana Cloud or self-hosted Mimir / Loki / Tempo / Pyroscope. Covers SDK auto-instrum6.6Kskills.sh installs
laravel-securityaffaan-m/eccLaravel security best practices — authentication, authorization, Eloquent safety, CSRF, XSS prevention, API security, and secure deployment configurations.6.6Kskills.sh installs