---
id: "aws-vpc-endpoint"
type: "component"
kind: "private-link"
provider: "aws"
category: "edge"
aliases: "VPCE"
docs: "https://docs.aws.amazon.com/vpc/latest/privatelink/privatelink-access-aws-services.html"
url: "https://localhost:3000/catalogue/components/aws-vpc-endpoint"
---

# AWS PrivateLink VPC endpoint

Private connection from VPC subnets to a service, without an internet gateway.

| | |
|---|---|
| Provider | [aws](https://localhost:3000/catalogue?provider=aws) |
| Kind | [Private endpoint](https://localhost:3000/catalogue/kinds/private-link) |
| Category | Edge |
| Official docs | [https://docs.aws.amazon.com/vpc/latest/privatelink/privatelink-access-aws-services.html](https://docs.aws.amazon.com/vpc/latest/privatelink/privatelink-access-aws-services.html) |
| Also known as | VPCE |

## Properties

| property | type | values | required | kind default | this component |
|---|---|---|---|---|---|
| `approvalRequired` | boolean | — | no | — | **false** |
| `crossRegion` | boolean | — | no | false | **false** |
| `endpointCount` | integer | — | no | — | inherited |
| `endpointType` | enum | `interface`, `gateway`, `gateway-load-balancer` | no | "interface" | inherited |
| `ipAddressType` | enum | `ipv4`, `ipv6`, `dualstack` | no | "ipv4" | inherited |
| `managed` | boolean | — | no | false | **true** |
| `privateDnsIntegration` | boolean | — | no | — | inherited |
| `publicAccessDisabled` | boolean | — | no | — | inherited |
| `requiresInternetGateway` | boolean | — | no | false | inherited |
| `serviceInitiatedRequests` | boolean | — | no | false | inherited |

Bold values are the ones this component pins.

## Rules that apply · 0

No rule selects this kind or its category.

## Other products of the same kind · 13

- [PrivateLink](https://localhost:3000/catalogue/components/alibaba-privatelink.md) `alibaba-privatelink` — alibabacloud
- [PrivateLink endpoint service](https://localhost:3000/catalogue/components/aws-privatelink-service.md) `aws-privatelink-service` — aws
- [AWS RTB Fabric gateway](https://localhost:3000/catalogue/components/aws-rtb-fabric.md) `aws-rtb-fabric` — aws
- [Azure Private Link](https://localhost:3000/catalogue/components/azure-private-link.md) `azure-private-link` — azure
- [Cloudflare Tunnel](https://localhost:3000/catalogue/components/cloudflare-tunnel.md) `cloudflare-tunnel` — cloudflare
- [Workers VPC](https://localhost:3000/catalogue/components/cloudflare-workers-vpc.md) `cloudflare-workers-vpc` — cloudflare
- [Generic private endpoint](https://localhost:3000/catalogue/components/private-link.md) `private-link` — default
- [Private Service Connect](https://localhost:3000/catalogue/components/google-private-service-connect.md) `google-private-service-connect` — gcp
- [Serverless VPC Access connector](https://localhost:3000/catalogue/components/google-serverless-vpc-access-connector.md) `google-serverless-vpc-access-connector` — gcp
- [Virtual Private Endpoint Gateway](https://localhost:3000/catalogue/components/ibm-virtual-endpoint-gateway.md) `ibm-virtual-endpoint-gateway` — ibm
- [Private Endpoint](https://localhost:3000/catalogue/components/oci-private-endpoint.md) `oci-private-endpoint` — oci
- [Service Gateway](https://localhost:3000/catalogue/components/oci-service-gateway.md) `oci-service-gateway` — oci
- [OUTSCALE Net access point](https://localhost:3000/catalogue/components/outscale-net-access-point.md) `outscale-net-access-point` — outscale

## Use it in a design

```yaml
nodes:
  - { id: "aws-vpc-endpoint", component: "aws-vpc-endpoint" }
```

## Source (`component` YAML, verbatim)

```yaml
# yaml-language-server: $schema=../../schema/component.schema.json
# AWS PrivateLink VPC endpoint: private connection from subnets in a VPC to a service.
# "Access AWS services through AWS PrivateLink": an interface endpoint needs no internet gateway or NAT,
# AWS services accept connection requests automatically, and the endpoint IP address type defaults to IPv4.
schemaVersion: "1"
type: "component"
id: "aws-vpc-endpoint"
kind: "private-link"
provider: "aws"
docs: "https://docs.aws.amazon.com/vpc/latest/privatelink/privatelink-access-aws-services.html"
aliases: ["VPCE"]
defaults:
  managed: true
  approvalRequired: false
  crossRegion: false
properties:
  endpointType:
    type: "enum"
    values: ["interface", "gateway", "gateway-load-balancer"]
    default: "interface"
  ipAddressType:
    type: "enum"
    values: ["ipv4", "ipv6", "dualstack"]
    default: "ipv4"
  requiresInternetGateway:
    type: "boolean"
    default: false
  serviceInitiatedRequests:
    type: "boolean"
    default: false
```

Human page: https://localhost:3000/catalogue/components/aws-vpc-endpoint