feat: s3 and ssm endpoints

p6m7g8 · Nov 24, 2024 · 017b5e5 · 017b5e5
1 parent 326c65c
commit 017b5e5
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/src/constructs/p6-lz-vpc.ts b/src/constructs/p6-lz-vpc.ts
@@ -60,5 +60,15 @@ export class P6LzVpc extends cdk.Resource {
     })
     cdk.Tags.of(sg).add('Name', 'p6-lz-sg-default')
     sg.addIngressRule(eiceSg, ec2.Port.SSH, 'Allow SSH traffic from EICE SG')
+
+    new ec2.GatewayVpcEndpoint(this, `Gateway-S3`, {
+      service: new ec2.GatewayVpcEndpointAwsService('s3'),
+      vpc,
+    })
+
+    new ec2.InterfaceVpcEndpoint(this, `Interface-SSM`, {
+      service: new ec2.InterfaceVpcEndpointAwsService('ssm'),
+      vpc,
+    })
   }
 }