Networking and Content Delivery
AWS PrivateLink
AWS PrivateLink provides private connectivity to supported services and customer endpoint services through VPC endpoints. It keeps GenAI API traffic on AWS networking without requiring public IPs, internet gateways, or broad network peering.
Key points
- Interface endpoints create elastic network interfaces in selected subnets
- Endpoint policies can restrict supported service actions
- Private DNS can map normal service names to endpoint addresses
When to use it
- Invoke supported Bedrock endpoints from isolated application subnets
- Expose an internal inference service privately to consumer VPCs
Exam tips
- Choose PrivateLink for service-level private access and VPC peering or Transit Gateway for broader routed connectivity
- Private transport does not grant API permission; IAM and resource policies remain required