AWS PrivateLink announces Tunnel Endpoints to access network segments

AWS PrivateLink now allows customers to privately and securely access network segments in another VPC or account using a VPC endpoint. By creating a new "tunnel" endpoint, customers can tunnel into the network segment and access resources placed within it. Previously, sharing resources with external vendors required creating a resource configuration per resource; now, customers can create a single resource configuration representing the CIDR range of their network and share it with vendors through AWS Resource Access Manager. Vendors create a tunnel endpoint and tunnel into the customer's VPC using GENEVE encapsulation to access resources within the specified CIDR range. Tunnel endpoints are charged hourly and per GB of data processed. For pricing details, see the AWS PrivateLink pricing page. This feature is available in the US East (N. Virginia), US East (Ohio), US West (N. California), US West (Oregon), Africa (Cape Town), Asia Pacific (Hong Kong), Asia Pacific (Hyderabad), Asia Pacific (Jakarta), Asia Pacific (Malaysia), Asia Pacific (Melbourne), Asia Pacific (Mumbai), Asia Pacific (Osaka), Asia Pacific (Seoul), Asia Pacific (Singapore), Asia Pacific (Sydney), Asia Pacific (Tokyo), Canada (Central), Canada West (Calgary), Europe (Frankfurt), Europe (Ireland), Europe (London), Europe (Milan), Europe (Paris), Europe (Spain), Europe (Stockholm), Europe (Zurich), Mexico (Central), and South America (São Paulo) regions.

Why it matters

AWS PrivateLink is a technology that enables private access across VPC and account boundaries. This update significantly simplifies the management of resource sharing.