Which solution will meet these requirements?
Connect to the vendor’s public API address for the data service
Connect to the vendor by way of a VPC peering connection between the vendor’s VPC and the company’s VPC
Connect to the vendor by way of a VPC endpoint service that uses AWS PrivateLink
Connect to a public bastion host that the vendor provides. Tunnel the API traffic
Explanations:
The company’s AWS environment does not allow outbound internet access. Connecting to a public API address would require internet access, which is not allowed.
VPC peering allows connectivity between VPCs but is not suitable for connecting to a third-party SaaS provider’s API, especially if that provider does not offer peering as an option.
AWS PrivateLink provides a highly available and secure way to connect to the vendor’s API privately within the AWS network, without needing internet access.
Using a bastion host adds unnecessary complexity and does not provide high availability or optimal security for API access, especially in a production environment.
I plan that the answer is:
Connect to the vendor by way of a VPC endpoint service that uses AWS PrivateLink