VPC Endpoints

• When you create a VPC endpoint, you can attach an endpoint policy that controls access to the service to which you are connecting.

• You can modify the endpoint policy attached to your endpoint and add or remove the route tables used by the endpoint.

• An endpoint policy does not override or replace IAM user policies or service-specific policies (such as S3 bucket policies).

  • It is a separate policy for controlling access from the endpoint to the specified service.