用 AWS PrivateLink 保障 Amazon Quick 企业网络私有访问
原标题：Securing Quick access from corporate networks with AWS PrivateLink
AI 摘要
AWS 发布技术博客，介绍如何通过 AWS PrivateLink 让 Amazon Quick 从企业私有网络访问本地数据源，避免流量经过公共互联网。方案要求企业已具备 AWS Direct Connect 或 Site-to-Site VPN，再配置 VPC 端点、VPC 连接、安全组和端点策略实现纵深防御。文章区分了用户访问流量与数据拉取流量两条路径，并说明 Quick Sight、Quick Flows、Quick Agents 等功能如何经 VPC 连接访问私有数据库和内部 MCP 服务器。该方案面向 HIPAA、FedRAMP、PCI-DSS 等合规场景，可减少攻击面并保持低延迟。
正文节选
Securing Quick access from corporate networks with AWS PrivateLink When enterprise data sits behind a corporate firewall or in a private on-premises data center, there’s no direct network path from AWS, even though the AI agents and dashboards in Amazon Quick can query virtually any data source. Administrators must make sure their sensitive enterprise data isn’t exposed to the public internet while being accessible for AI-driven insights and actions. For many enterprises, routing traffic over th