Creates a VPC endpoint for a specified service. An endpoint enables you to create a private connection between your VPC and the service. The service may be provided by AWS, an AWS Marketplace partner, or another AWS account. For more information, see VPC Endpoints in the Amazon Virtual Private Cloud User Guide.
ec2_create_vpc_endpoint(DryRun, VpcEndpointType, VpcId, ServiceName,
PolicyDocument, RouteTableIds, SubnetIds, SecurityGroupIds, ClientToken,
PrivateDnsEnabled)
Checks whether you have the required permissions for the action, without
actually making the request, and provides an error response. If you have
the required permissions, the error response is DryRunOperation
.
Otherwise, it is UnauthorizedOperation
.
The type of endpoint.
Default: Gateway
[required] The ID of the VPC in which the endpoint will be used.
[required] The service name. To get a list of available services, use the DescribeVpcEndpointServices request, or get the name from the service provider.
A policy to attach to the endpoint that controls access to the service. The policy must be in valid JSON format. If this parameter is not specified, we attach a default policy that allows full access to the service.
(Gateway endpoint) One or more route table IDs.
(Interface endpoint) The ID of one or more subnets in which to create an endpoint network interface.
(Interface endpoint) The ID of one or more security groups to associate with the endpoint network interface.
Unique, case-sensitive identifier you provide to ensure the idempotency of the request. For more information, see How to Ensure Idempotency.
(Interface endpoint) Indicate whether to associate a private hosted zone
with the specified VPC. The private hosted zone contains a record set
for the default public DNS name for the service for the region (for
example, kinesis.us-east-1.amazonaws.com
) which resolves to the
private IP addresses of the endpoint network interfaces in the VPC. This
enables you to make requests to the default public DNS name for the
service instead of the public DNS names that are automatically generated
by the VPC endpoint service.
To use a private hosted zone, you must set the following VPC attributes
to true
: enableDnsHostnames
and enableDnsSupport
. Use
ModifyVpcAttribute to set the VPC attributes.
Default: false
svc$create_vpc_endpoint( DryRun = TRUE|FALSE, VpcEndpointType = "Interface"|"Gateway", VpcId = "string", ServiceName = "string", PolicyDocument = "string", RouteTableIds = list( "string" ), SubnetIds = list( "string" ), SecurityGroupIds = list( "string" ), ClientToken = "string", PrivateDnsEnabled = TRUE|FALSE )
A gateway
endpoint serves as a target for a route in your route table
for traffic destined for the AWS service. You can specify an endpoint
policy to attach to the endpoint that will control access to the service
from your VPC. You can also specify the VPC route tables that use the
endpoint.
An interface
endpoint is a network interface in your subnet that
serves as an endpoint for communicating with the specified service. You
can specify the subnets in which to create an endpoint, and the security
groups to associate with the endpoint network interface.
Use DescribeVpcEndpointServices to get a list of supported services.