通过VPC端点访问Internet
有没有人可以在下面向我解释这种情况？ 我通过Bastion主机连接到私有子网中的EC2 Intance。然后创建了一个VPC网关端点以达到S3。我将所需的角色分配给EC2，并完成了与S3的连接。我的问题是，私有子网中的EC2实例如何从Internet下载？
Is there anyone who can explain me that situation below ?
I connected to Ec2 intance in private subnet via Bastion Host.Then I created a vpc gateway endpoint to reach s3. I assigned the required role to ec2 and the connection to s3 is done. My question is, how can Ec2 instance in private subnet download something from the internet?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
VPC端点用于通过AWS网络而不是通过Internet访问某个服务。
如果您希望您的实例能够与Internet交谈，则需要在公共子网中配置NAT网关，并且需要配置私有子网的路由表以将流量转发到NAT网关。
A VPC endpoint is used to access a certain service, in this case S3, over the AWS network instead of over the internet.
If you want your instance to be able to talk to the internet, you'll need to configure a NAT gateway in a public subnet, and you'll need to configure the route table of the private subnet to forward traffic to the NAT gateway.
是：
一个简单的解决方案 与使用私有子网相同，但是EC2实例将能够建立与Internet的出站连接（但不能入站，因此它仍然安全）。
A simple solution would be:
The effective result is the same as using a Private Subnet, but the EC2 instance will be able to establish Outbound connections to the Internet (but not Inbound, so it remains secure).