VPC endpoints for private access in DynamoDB - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is a VPC endpoint in AWS?

A VPC endpoint allows private connections between your Virtual Private Cloud (VPC) and supported AWS services without using the public internet.

beginner

Why use a VPC endpoint for DynamoDB?

Using a VPC endpoint for DynamoDB lets your applications access DynamoDB securely and privately without sending traffic over the internet.

intermediate

What type of VPC endpoint is used for DynamoDB?

DynamoDB uses a Gateway VPC endpoint, which routes traffic directly to DynamoDB without needing an internet gateway or NAT device.

intermediate

How does a VPC endpoint improve security for DynamoDB access?

It keeps data traffic within the AWS network, preventing exposure to the public internet and reducing risk of interception.

beginner

Can you access DynamoDB from a VPC without a VPC endpoint?

Yes, but traffic goes over the internet, which may expose data and require additional security measures like NAT gateways or internet gateways.

What type of VPC endpoint is used to connect to DynamoDB privately?

A Transit gateway

B Gateway endpoint

C VPN endpoint

D Interface endpoint

DynamoDB uses a Gateway VPC endpoint to route traffic privately without using the internet.

What is the main benefit of using a VPC endpoint for DynamoDB?

A Private and secure access without internet exposure

B Faster internet speed

C Lower AWS costs

D Automatic backups

VPC endpoints keep traffic within AWS network, enhancing security by avoiding the public internet.

If you do not use a VPC endpoint, how does your VPC access DynamoDB?

A Through a VPN connection

B Directly via private IP

C Over the public internet

D Using a NAT gateway

Without a VPC endpoint, traffic to DynamoDB goes over the public internet.

Which AWS service feature allows private communication between your VPC and DynamoDB?

A VPC peering

B Elastic IP

C CloudFront

D VPC endpoint

VPC endpoints enable private connections between your VPC and AWS services like DynamoDB.

What is NOT a characteristic of a Gateway VPC endpoint?

A It requires an internet gateway

B It routes traffic privately within AWS

C It supports DynamoDB access

D It does not use public IP addresses

Gateway endpoints do NOT require an internet gateway; they route traffic internally.

Explain what a VPC endpoint is and why it is useful for accessing DynamoDB privately.

Think about how your data stays inside AWS network.

Describe the difference between accessing DynamoDB with and without a VPC endpoint.

Consider where your data travels in each case.