Targets specific IP routes in the AWS VPC route table (as prefix-list), and can only be used with S3 and DynamoDB. Other services need to use interface endpoints.

Can’t use private IP.

Does not allow access from on-premises or from another AWS region.

Attached on the VPC level

Pricing

Free. Traffic is not billed.