tag: Privatelink · 4 items
- Platform/SRE — Plan: New GA capability keeps ACME cert issuance traffic inside the AWS network via a VPC interface endpoint; worth scheduling adoption this quarter for compliance-sensitive or egress-restricted environments that already use ACM with ACME clients.
- CI/CD — Skip
- Leader — Learn: ACM now offers a private network path for certificate issuance, which strengthens the compliance and network-isolation story for regulated workloads; no strategic decision or cost change is forced by this GA addition.
- Platform/SRE — Plan: New GA capability lets platform teams route FIPS-validated S3 traffic entirely within the VPC — actionable for teams running regulated or federal workloads; schedule a review of existing VPC endpoint configs and update to the FIPS S3 endpoint where compliance requires it.
- CI/CD — Skip
- Leader — Learn: Useful signal for leaders with federal or regulated customers — AWS now offers a path to keep S3 traffic VPC-internal under FIPS 140-3, which may simplify future compliance audits or contract negotiations with government clients.
- Platform/SRE — Plan: New GA capability that changes the connectivity architecture for Lambda MicroVMs in regulated environments — if you operate Lambda MicroVMs today or are evaluating them for compliance-sensitive workloads, schedule an evaluation to replace public-internet API paths with PrivateLink VPC Endpoints.
- CI/CD — Skip
- Leader — Learn: For organizations in financial services, healthcare, or government, this GA capability reduces a compliance blocker for Lambda MicroVM adoption, but no licensing, pricing, or vendor-risk decision is triggered — file as context for regulated-workload platform strategy.
- Platform/SRE — Plan: For EKS clusters in air-gapped or strict-egress VPCs, this GA capability enables IRSA token validation without internet access — evaluate adding the com.amazonaws.
.oidc-eks VPC interface endpoint to your network baseline this quarter. - CI/CD — Skip
- Leader — Skip