AWS PrivateLink (VPC Endpoint Services)

• Most secure & scalable way to expose a service to 1000s of VPCs

• Does not require VPC peering, internet gateway, NAT, route tables...

• Requires a network load balancer (Service VPC) and ENI (Customer VPC)