Previously, resource sharing over PrivateLink required individual resource configurations. Tunnel endpoints permit connectivity to a CIDR range resource configuration shared through AWS Resource Access Manager, allowing vendors or partners to access multiple resources within that network via a single encrypted GENEVE tunnel endpoint.
This capability streamlines multi-resource private access while maintaining high availability and scalability within numerous AWS Regions. Charges apply hourly for tunnel endpoints plus data processed. The feature expands PrivateLink’s reach beyond load-balanced applications to broader network resource access.
Source & further reading
AWS PrivateLink announces Tunnel Endpoints to access network segments ↗Source published 2026-09-18. This report was prepared with AI assistance from the linked primary-source material. Claims and limitations should be checked against the original announcement or research.