What is AWS PrivateLink Tunnel Endpoints?

Companies that run their systems in a public cloud keep them in isolated private networks, which makes it tricky to let an outside partner reach something inside without sending traffic over the open internet. AWS PrivateLink is Amazon's technology for connecting one private network to services and resources in another as if they were in the same network. A tunnel endpoint is a new type of VPC endpoint (a connection point inside a private network) that lets a vendor reach a whole block of addresses (a network segment) in a customer's network, instead of the customer sharing each resource one at a time. The vendor wraps its traffic in a protocol called GENEVE (a way of wrapping network traffic inside other traffic) to send it through. AWS posted the announcement on September 18, 2026.

Written from primary sources and reference pages, and checked against them by an independent AI fact-checker. Drafted with AI assistance.