AWS Private Link

AWS PrivateLink provides private connectivity between VPCs, AWS services, and your on-premises networks without exposing your traffic to the public internet. PrivateLink does not provide any encryption by default for data in transit. The service consumer always initiates the service (it is a one-way service), and the service provider only provides service to allow listed customers.