View a markdown version of this page

AWS Transform and interface endpoints (AWS PrivateLink) - AWS Transform
Considerations for AWS Transform VPC endpointsPrerequisitesCreating an interface VPC endpoint for AWS TransformUsing an on-premises computer to connect to a AWS Transform endpoint

AWS Transform and interface endpoints (AWS PrivateLink)

You can establish a private connection between your VPC and AWS Transform by creating an interface VPC endpoint. Interface endpoints are powered by AWS PrivateLink, a technology that enables you to privately access the AWS Transform console without an internet gateway, NAT device, VPN connection, or Direct Connect connection. Traffic between your VPC and AWS Transform does not leave the Amazon network.

Each interface endpoint is represented by one or more Elastic Network Interfaces in your subnets.

For more information, see Interface VPC endpoints (AWS PrivateLink) in the Amazon VPC User Guide.

Note

For AWS Transform custom PrivateLink documentation, see AWS Transform custom and interface endpoints (AWS PrivateLink).

Considerations for AWS Transform VPC endpoints

Before you set up an interface VPC endpoint for AWS Transform, ensure that you review Interface endpoint properties and limitations in the Amazon VPC User Guide.

Prerequisites

Before you begin any of the procedures below, ensure that you have the following:

  • An AWS account with appropriate permissions to create and configure resources.

  • A VPC already created in your AWS account.

  • Familiarity with AWS services, especially Amazon VPC and AWS Transform.

Creating an interface VPC endpoint for AWS Transform

You can create a VPC endpoint for the AWS Transform service using either the Amazon VPC console or the AWS Command Line Interface (AWS CLI). For more information, see Creating an interface endpoint in the Amazon VPC User Guide.

The following VPC endpoint service names are available for AWS Transform:

  • com.amazonaws.region.transform

  • com.amazonaws.region.api.transform – Required for the AWS Transform WebApp. This endpoint must have private DNS enabled (the Enable DNS name option) so that api.transform.region.on.aws resolves to a private IP address in your VPC.

Replace region with the AWS Region where your AWS Transform profile is installed, for example, com.amazonaws.us-east-1.transform.

Note

If you use the AWS Transform WebApp, the api.transform endpoint is required. For the full setup guide, see Accessing the AWS Transform WebApp from a VPC.

For more information, see Supported Regions for AWS Transform and Accessing a service through an interface endpoint in the Amazon VPC User Guide.

Using an on-premises computer to connect to a AWS Transform endpoint

This section describes the process of using an on-premises computer to connect to AWS Transform through a AWS PrivateLink endpoint in your AWS VPC.

  1. Create a VPN connection between your on-premises device and your VPC.

  2. Create an interface VPC endpoint for AWS Transform.

  3. Set up an inbound Amazon Route 53 endpoint. This will enable you to use the DNS name of your AWS Transform endpoint from your on-premises device.