Search…
⌃K
Links

AWS EC2 VPCEndpoint

Best practices and references below are based on published guidance from the cloud service provider and may reference native capabilities the cloud service provider offers. If you are not using the native security capabilities, the same security requirement can be met using other security capabilities your organization utilizes

Access Control Policy

Design Guidance:

AWS::EC2::VPCEndpoint

Policy Document
Terraform
Policy Document-Statement
Terraform
Statement-Effect
Terraform
Statement-Action
Terraform
Statement-Principal
Terraform
Statement-Resource
Terraform
Statement-Condition
Terraform

AWS::EC2::VPCEndpointServicePermissions

Allowed Principals
Service Id

Name/Address Resolution Integrity

Design Guidance:

AWS::EC2::VPCEndpoint

Private Dns Enabled
Terraform

Information Flow Routing

AWS::EC2::VPCEndpoint

Route Table Ids
Terraform

Firewalls

Design Guidance:

AWS::EC2::VPCEndpoint

Security Group Ids
Terraform

Asset Inventory

Design Guidance:

AWS::EC2::VPCEndpoint

Service Name
Terraform

Subnet Isolation

Design Guidance:

AWS::EC2::VPCEndpoint

Subnet Ids
Terraform
VPC Id
Terraform

Logging

Design Guidance:

AWS::EC2::VPCEndpointConnectionNotification

Service Id
Terraform
VPCendpoint Id
Terraform

AWS::EC2::VPCEndpointConnectionNotification

Connection Events
Terraform
Connection Notification Arn
Terraform

Load Balancing

Design Guidance:

AWS::EC2::VPCEndpointService

Network Load Balancer Arns
Terraform
Appliance Load Balancer Arns
Terraform

Information Systems Enforcing Network Access

Design Guidance:

AWS::EC2::VPCEndpointService

Acceptance Required
Terraform
Last modified 7mo ago