Endpoint Stack

The Endpoint Stack sub-template is invoked by the VPC Stack sub-template to create AWS Interface Endpoints for the VPC. Endpoint Stack creates VPC endpoints for EC2, KMS and ELB in the same region of the parent stack. The following resources are created by Endpoint Stack:

• Lambda Function

• IAM Role

• EC2 Interface Endpoint

• ELB Interface Endpoint

• KMS Interface Endpoint

The Endpoint Stack defines a new IAM role with the following policies:

• ec2:CreateVpcEndpoint

• ec2:DescribeVpcEndpoints

• ec2:DeleteVpcEndpoints

• logs:CreateLogGroup

• logs:CreateLogStream

• logs:PutLogEvents