通过AWS Endpoints从内网访问S3

AWS S3作为非结构化数据的存储,经常会有内网中的app调用的需求。S3默认是走公网访问的,如果内网app通过公网地址访问S3并获取数据会消耗公网带宽费用。如下图所示:

AWS 提供了一种叫做endpoints的资源,这种资源可以后挂S3服务,使得内网服务可以不出公网访问S3.

VPC endpoints for Amazon S3 simplify access to S3 from within a VPC by providing configurable and highly reliable secure connections to S3 that do not require an internet gateway or Network Address Translation (NAT) device. When you create a S3 VPC endpoint, you can attach an endpoint policy to it that controls access to Amazon S3.

创建endpoints时,如果是S3,需选择gateway类型。

There are three types of VPC endpoints -- Interface endpoints, Gateway Load Balancer endpoints, and Gateway endpoints. Interface endpoints and Gateway Load Balancer endpoints are powered by AWS PrivateLink, and use an Elastic Network Interface (ENI) as an entry point for traffic destined to the service. Interface endpoints are typically accessed using the public or private DNS name associated with the service, while Gateway endpoints and Gateway Load Balancer endpoints serve as a target for a route in your route table for traffic destined for the service.

创建完成后(按需配置VPC,route table等),即可使用https://{{bucket-name}}.s3.ap-southeast-1.amazonaws.com通过aws内网(骨干网)访问S3了。

图片参考:https://www.youtube.com/watch?v=jo3X_aay4Vs

相关推荐
TiAmo zhang2 天前
DeepSeek-R1 模型现已在亚马逊云科技上提供
人工智能·云计算·aws
struggle20255 天前
AWS Bedrock 多代理蓝图存储库使用 CDK、Streamlit 和 LangFuse 运行 AWS Bedrock 多代理 AI 协作的蓝图
运维·人工智能·自动化·云计算·aws
Revendell5 天前
AWS Aurora存算分离架构
aws
李兆龙的博客5 天前
从一到无穷大 #44:AWS Glue: Data integration + Catalog
云计算·aws
sealaugh325 天前
aws(学习笔记第三十六课) apigw-http-api-lambda-dynamodb
笔记·学习·aws
AWS官方合作商5 天前
突破数据迁移瓶颈!AWS Snowball如何让PB级数据“瞬间”上云?
云计算·aws
AWS官方合作商5 天前
AWS混合云部署实战:打造企业级数字化转型的“黄金架构”
云计算·aws
AWS官方合作商6 天前
AWS CloudWatch 实战:构建智能监控与自动化运维体系
运维·自动化·aws
Dan淡淡的心6 天前
DeepSeek-R1 模型现已在 AWS 平台上正式上线
云计算·aws
ะัี潪ิื6 天前
aws S3利用lambda edge实现图片缩放、质量转换等常规图片处理功能
java·云计算·aws