Organizations can now connect directly to private AWS resources
Pro and Enterprise organizations can establish AWS PrivateLink connections to securely route task traffic to their VPCs without traversing the public internet.
Accessing private AWS resources—like internal databases, caches, or custom APIs—from serverless environments traditionally requires exposing those resources to the public internet or managing complex, fragile VPN overlays. Both compromise security and developer velocity.
Organizations can now configure AWS PrivateLink connections directly from their dashboard. By providing an endpoint service name, teams can establish a secure, one-way connection from their tasks into their private AWS VPCs. The system automatically handles network isolation under the hood, tagging execution pods to dynamically match organization-specific Cilium network policies.
This keeps sensitive data traffic entirely on the AWS backbone, satisfying strict enterprise security and compliance requirements while remaining completely invisible to the code running in the tasks. The new capabilities touch the full stack, spanning from the web application's setting pages down to the Kubernetes workload manager.