Skip to content
Cloud & Infrastructure
Skill

/configuring-vpc-endpoints-for-private-aws-service-access

Configures VPC endpoints (interface and gateway) for private AWS service access using AWS PrivateLink. Use when setting up secure private connectivity to S3, DynamoDB, and other AWS services without internet gateway, NAT device, or public IP addresses. Covers endpoint creation,

BOOST
@awsaws@aws
From plugin
agent-toolkit-for-aws
3.4k153 skills7 agents10 commands3 MCP

Claude Code

$ npx -y skills add aws/agent-toolkit-for-aws --skill configuring-vpc-endpoints-for-private-aws-service-access --agent claude-code

SKILL.md

configuring-vpc-endpoints-for-private-aws-service-access.SKILL.md
name: configuring-vpc-endpoints-for-private-aws-service-access
description: Configures VPC endpoints (interface and gateway) for private AWS service access using AWS PrivateLink. Use when setting up secure private connectivity to S3, DynamoDB, and other AWS services without internet gateway, NAT device, or public IP addresses. Covers endpoint creation, security groups, route tables, and DNS configuration.
version: 1

Configuring VPC Endpoints for Private AWS Service Access

Overview

Domain expertise for configuring VPC endpoints to enable private access to AWS services without routing traffic through the internet. Covers both gateway endpoints (S3, DynamoDB) and interface endpoints (EC2, SSM, Secrets Manager, etc.) powered by AWS PrivateLink.

Configure VPC endpoints

To create and configure VPC endpoints for private AWS service access, follow the procedure exactly. See [VPC endpoints configuration procedure](references/configure-vpc-endpoints-for-private-aws-service-access.md).

Troubleshooting

Endpoint not available

Check security group rules, subnet configurations, and service availability in the region.

DNS resolution issues

Verify DNS hostnames and DNS resolution are enabled on the VPC and that the DHCP options set has correct domain name servers.

Connection timeouts

Verify security group rules allow HTTPS traffic (port 443) and route tables are properly configured for gateway endpoints.

Policy restrictions

Review endpoint policies — default policies allow all access, but custom policies may be restrictive.

Read more
Read it on GitHub ↗
Stats
PythonJavaScriptHTMLSQLPostgreSQLMySQLAWSGCPAzureGitHubAnthropicMCP
3,448
Stars
445
Forks
Active
Maintenance
Python
Language
Apache-2.0
License
Last commit
Created

Repo: aws/agent-toolkit-for-aws

In this plugin
153 skills10 commands7 agents3 MCP
See everything inside
@aws
Ships withagent-toolkit-for-aws

Help AI coding agents build, deploy, and manage applications on AWS. The Agent Toolkit for AWS gives AI coding agents the tools, knowledge, and guardrails they need to work with AWS services.

3.4k153 skills7 agents3 MCP
Get the whole plugin

Stars on GitHub

Momentum

stars in total
3.4k
Star history of aws/agent-toolkit-for-aws on GitHub, a chart by star-history.com
See what's trending this week

Other skills on agent-toolkit-for-aws.

See all 153 skills in agent-toolkit-for-aws

More skills from other plugins.

container

container

Use when running, building, or managing Linux containers on macOS, or when a task involves Docker, docker compose, Lima, Colima,…

apple-container11d51k
@apple@appleInstall Skill
agents-sdk
Auto-invoked

agents-sdk

Build, debug, or review Cloudflare Agents SDK applications using the agents package.

cloudflare10d3.2k
@cloudflare@cloudflareInstall Skill

Questions about configuring-vpc-endpoints-for-private-aws-service-access.

Which coding agents can use configuring-vpc-endpoints-for-private-aws-service-access?
configuring-vpc-endpoints-for-private-aws-service-access installs in Claude Code, Codex, Cursor, Gemini CLI, GitHub Copilot, OpenCode and Windsurf with the skills CLI, using each agent's flag shown on this page. Flowy's auto-invocation, which fires a skill when your prompt matches, runs in Claude Code only.