AWS PrivateLink Service Stack

AWS PrivateLink Endpoint Service via CloudFormation

A pair of CloudFormation stacks — one for the service provider side (NLB + endpoint service), one for the consumer side (VPC endpoint) — so you can expose an internal service privately across VPCs or accounts without VPC peering or public exposure.

What's Included

• Network Load Balancer targeting your service's instances or IP addresses
• VPC Endpoint Service with acceptance required toggle and allowed principals list
• Consumer VPC endpoint in a separate VPC with private DNS enabled
• Security groups scoped to the NLB and consumer ENIs
• CloudWatch metrics for NLB connection counts and healthy host count

What You Get

• provider-stack.yaml — NLB and endpoint service (deploy in service provider account/VPC)
• consumer-stack.yaml — VPC endpoint and DNS config (deploy in consumer account/VPC)
• parameters/ — parameter files for provider and consumer deployments
• README.md — cross-account acceptance flow, DNS resolution notes, and scaling guide

Requirements

• AWS account(s) with CloudFormation and EC2 permissions
• Existing service running on EC2 instances or reachable IPs for the NLB target group
• For cross-account: AWS account IDs for allowed principals