so i keep having people froth at the mouth about how it is more secure to use VPC endpoints to communicate to AWS services.
is there any practical mechanism by which not using the VPC endpoints can be insecure, which does not also affect VPC endpoints?
i usually get some hand waving about man in the middle attacks, but i figure if you can insert that into an AWS data center you can probably just see all the VPC internal traffic anyways. and one should be using TLS to talk to the services anyways.
is there any practical mechanism by which not using the VPC endpoints can be insecure, which does not also affect VPC endpoints?
i usually get some hand waving about man in the middle attacks, but i figure if you can insert that into an AWS data center you can probably just see all the VPC internal traffic anyways. and one should be using TLS to talk to the services anyways.