AWS: VPC interface endpoint for private subnets

Question

I have 3 private subnets (internet access through NAT gateways). I would like to leverage VPC endpoints to interact with AWS services like SQS, SNS, RDS etc from these subnets without accessing the internet (all traffic for these services should remain inside AWS). The problem is, when I try to create a VPC endpoint for example for a service like SQS, I can only choose type interface which seems to support only public subnets:

But I need to use the VPC endpoint inside private subnets (without an IGW). Is this possible?

Answer 1

To reproduce this situation I did the following:

• Created a VPC
• Created 4 subnets in the VPC:
  • Public in AZ-A
  • Public in AZ-B
  • Private in AZ-A
  • Private in AZ-B

I then went to create a VPC Endpoints for Amazon SQS and I was able to select any of the subnets: