Question

A company runs an internal microservice behind a Network Load Balancer and exposes it as a PrivateLink endpoint service. A consumer account creates an interface VPC endpoint to reach the service. The consumer's application, running on EC2 instances in a private subnet, receives connection timeouts when calling the endpoint's DNS name. Traffic never appears in the provider's target logs. Which action is most likely required to resolve the connectivity issue?

Accepted Answer

Attach a security group to the interface endpoint's elastic network interfaces that allows inbound traffic on the service port from the consumer application's security group or subnet CIDR.

Answer

Add an inbound rule to the provider's Network Load Balancer security group permitting the consumer VPC CIDR.

Answer

Enable cross-zone load balancing on the provider's Network Load Balancer so the endpoint can reach targets in all Availability Zones.

Answer

Modify the endpoint service acceptance settings to auto-accept the consumer's connection request.