Skip to content
Development
Skill

/configuring-vpc-endpoints-for-private-aws-service-access

Configures VPC endpoints (interface and gateway) for private AWS service access using AWS PrivateLink. Use when setting up secure private connectivity to S3, DynamoDB, and other AWS services without internet gateway, NAT device, or public IP addresses. Covers endpoint creation,

Boost this skill
@awsaws@aws
From plugin
agent-toolkit-for-aws
2.6k127 skills9 commands3 MCP
Install
$ npx -y skills add aws/agent-toolkit-for-aws --skill configuring-vpc-endpoints-for-private-aws-service-access --agent claude-code

How it fires

How this skill gets triggered: by you, by Claude, or both.

  • Fires itselfAuto-invocation. Claude auto-loads it when your prompt matches the work.Auto-invocation is when the right skill fires by itself at the right moment, driven by a FLOW.md router and a hook, instead of you invoking it by name. It is the difference between a skill being installed and a skill actually getting used.Read the full definition →
  • You can call itInvoke it directly when you want it.
  • Slash command/configuring-vpc-endpoints-for-private-aws-service-access

Context preview

The summary Claude sees to decide when to auto-load this skill.

Configures VPC endpoints (interface and gateway) for private AWS service access using AWS PrivateLink. Use when setting up secure private connectivity to S3, DynamoDB, and other AWS services without internet gateway, NAT device, or public IP addresses. Covers endpoint creation,

SKILL.md

configuring-vpc-endpoints-for-private-aws-service-access.SKILL.md
name: configuring-vpc-endpoints-for-private-aws-service-access
description: Configures VPC endpoints (interface and gateway) for private AWS service access using AWS PrivateLink. Use when setting up secure private connectivity to S3, DynamoDB, and other AWS services without internet gateway, NAT device, or public IP addresses. Covers endpoint creation, security groups, route tables, and DNS configuration.
version: 1

Configuring VPC Endpoints for Private AWS Service Access

Overview

Domain expertise for configuring VPC endpoints to enable private access to AWS services without routing traffic through the internet. Covers both gateway endpoints (S3, DynamoDB) and interface endpoints (EC2, SSM, Secrets Manager, etc.) powered by AWS PrivateLink.

Configure VPC endpoints

To create and configure VPC endpoints for private AWS service access, follow the procedure exactly. See [VPC endpoints configuration procedure](references/configure-vpc-endpoints-for-private-aws-service-access.md).

Troubleshooting

Endpoint not available

Check security group rules, subnet configurations, and service availability in the region.

DNS resolution issues

Verify DNS hostnames and DNS resolution are enabled on the VPC and that the DHCP options set has correct domain name servers.

Connection timeouts

Verify security group rules allow HTTPS traffic (port 443) and route tables are properly configured for gateway endpoints.

Policy restrictions

Review endpoint policies — default policies allow all access, but custom policies may be restrictive.

Read more
Read it on GitHub ↗
Ships withagent-toolkit-for-aws

Help AI coding agents build, deploy, and manage applications on AWS. The Agent Toolkit for AWS gives AI coding agents the tools, knowledge, and guardrails they need to work with AWS services.

Get the whole plugin
Stats
PythonTypeScriptJavaScriptHTMLSwift
+7 tags
SQLPostgreSQLMySQLAWSGitHubAnthropicMCP
2,644
Stars
308
Forks
Active
Maintenance
Python
Language
Apache-2.0
License
2d ago
Last commit
4mo ago
Created

Repo: aws/agent-toolkit-for-aws

In this plugin
127 skills9 commands3 MCP
See everything inside

Other skills on agent-toolkit-for-aws.

See all 127 skills in agent-toolkit-for-aws