What changed
AWS has announced new private network connectivity features for Amazon Quick, enabling secure access to on-premises data sources without exposing traffic to the public internet. The update includes the use of AWS PrivateLink for user-facing traffic and VPC connections for data-fetching operations.
What this means in practice
The new configuration allows administrators to connect on-premises data sources to Amazon Quick privately, ensuring sensitive data remains within controlled network boundaries. This is achieved by setting up VPC endpoints powered by AWS PrivateLink for user-facing traffic and VPC connections for data-fetching operations. The setup assumes an existing AWS Direct Connect or Site-to-Site VPN linking the on-premises environment to the V, and it involves configuring security groups and VPC endpoint policies for added security.
Limitations and availability
The features are available for Amazon Quick Enterprise subscribers and require an active AWS account with an Enterprise edition. VPC endpoints for Quick website access are not available in AWS China Regions or AWS GovCloud (US) Regions. Currently, VPC connections are supported only for Amazon Redshift, while other sources like Confluence, SharePoint, and Amazon S3 can use bucket policies for access control. The configuration process involves setting up IAM permissions and ensuring DNS resolution routes traffic through VPC endpoints rather than public addresses.
