Feature Request: EC2 Endpoint

[bflugon]

Would it be possible to support adding an EC2 endpoint to the VPC? I see that you already support both S3 and dynamodb, so EC2 would make a great addition. We currently use them for our api calls in a VPC that is not attached to the internet.

[tbugfinder]

Once #195 is merged, I'd start adding all other types of interface endpoints also.

[antonbabenko]

v1.52.0 has been released with both SSM and EC2 VPC endpoints.

[Jeeppler]

I could not find anything regarding EC2 endpoints. Can somebody point me to the docs?

[antonbabenko]

@Jeeppler Here is how you can use it:

terraform-aws-vpc/examples/complete-vpc/main.tf

Lines 52 to 55 in 8e2f50e

	# VPC Endpoint for EC2
	enable_ec2_endpoint = true
	ec2_endpoint_private_dns_enabled = true
	ec2_endpoint_security_group_ids = ["${data.aws_security_group.default.id}"]

[Jeeppler]

@antonbabenko Thank you. I do not understand what the EC2 endpoint is useful for. I do not understand the feature. I mean the S3 endpoint gives you faster access to S3, without having to route all the traffic through the internet and instead access the AWS S3 service directly. However, what is the purpose of the EC2 endpoint? I could not find any AWS documentation when I just searched for EC2 endpoint. Maybe, your or somebody else can just point me to the AWS docs for the EC2 endpoint feature?

[antonbabenko]

AWS documentation has much more about this here - https://docs.aws.amazon.com/vpc/latest/userguide/vpc-endpoints.html :
Endpoints are virtual devices. They are horizontally scaled, redundant, and highly available VPC components that allow communication between instances in your VPC and services without imposing availability risks or bandwidth constraints on your network traffic.

I like to think about this as the following:

1. Gateway types of endpoints are easy to understand - S3 and DynamoDB, where traffic goes to specified service internally/directly.
2. Interface type of endpoints is an elastic network interface with a private IP address that serves as an entry point for traffic destined to a supported service. This includes EC2 service as well.

[github-actions]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues. If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.