No Public Internet: Cross-Region & Cross-Account AWS PrivateLink

"No Public Internet: Cross-Region & Cross-Account Private Connectivity Workshop with AWS PrivateLink"
We all know that sentence: "can we just expose it through the internet, just for now?" 🙈 Spoiler: "just for now" tends to last forever. From the AWS user group in Valencia, we want to give you the tools 🛠️ to say no with confidence — and offer something better in return.

In this hands-on workshop 🧑‍💻 we will connect services across different AWS accounts AND different AWS regions 🌍 without a single packet ever touching the public internet. Our weapon of choice: 🔒 AWS PrivateLink and VPC Endpoint Services — the boring, battle-tested, production-ready way to keep your traffic private, your security team happy 😌, and your architecture diagrams clean.

We'll build the whole thing together, step by step: a producer service in one account/region, a consumer in another, and a fully private path between them. No NAT gateways, no public endpoints, no shortcuts. 🚀
Don't forget to bring your laptop and an AWS account where you can deploy resources!

What you'll learn

• How AWS PrivateLink and VPC Endpoint Services actually work under the hood
• Expose a service from one AWS account and consume it from another
• Extend that pattern across regions using inter-region endpoints
• Manage DNS, security groups, and permissions for private endpoints

This hands-on workshop is designed for engineers comfortable with basic AWS networking (VPCs, subnets, security groups).
---

Agenda

• 18:15 - Doors open
• 18:30 - Workshop
• 20:30 - Networking