CuraDevOps

tag: Vpc-Endpoints · 2 items

Plan archived AWS IAM OIDC discovery endpoints now available via VPC interface endpoints
2026-09-26 · AWS What's New · source ↗ #aws-iam#vpc-endpoints#oidc
  • Platform/SRE — Plan: Workloads in private VPCs without internet egress can now verify JWTs via PrivateLink rather than requiring internet access; evaluate creating an interface VPC endpoint if you run air-gapped or restricted-egress VPCs that rely on IAM outbound identity federation.
  • CI/CD — Skip
  • Leader — Skip
Plan archived AWS CloudTrail adds UserIdentity filtering for VPC endpoint events
2026-07-21 · AWS What's New · source ↗ #aws-cloudtrail#vpc-endpoints#data-perimeter
  • Platform/SRE — Plan: This GA feature lets you reduce CloudTrail network activity event volume and cost by scoping logging to untrusted or access-denied identities on VPC endpoints — a concrete improvement for data perimeter monitoring. Update your CloudTrail advanced event selectors this quarter to filter trusted IAM roles and cut noise on VpceAccessDenied events.
  • CI/CD — Skip
  • Leader — Learn: This feature enables selective CloudTrail logging that can meaningfully reduce ingestion costs for high-volume VPC endpoint environments, relevant for FinOps conversations around AWS audit logging spend — no strategic decision required now.