View a markdown version of this page

Amazon PrivateLink for Amazon MWAA - Amazon Managed Workflows for Apache Airflow
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Amazon PrivateLink for Amazon MWAA

With Amazon PrivateLink, you can access Amazon MWAA from within your VPC without crossing the public internet. Interface VPC endpoints are elastic network interfaces with private IP addresses in your subnets. For more information, see Access an Amazon service using an interface VPC endpoint in the Amazon VPC User Guide.

Amazon MWAA uses prefixes for service endpoints, where each prefix corresponds to a set of API operations:

Environment management

api.airflow.region.amazonaws.com (use api.airflow.region.api.aws for IPv6)

  • CreateEnvironment

  • DeleteEnvironment

  • GetEnvironment

  • ListEnvironments

  • ListTagsForResource

  • TagResource

  • UntagResource

  • UpdateEnvironment

Airflow environment

env.airflow.region.amazonaws.com (use env.airflow.region.api.aws for IPv6)

  • CreateCliToken

  • CreateWebLoginToken

FIPS-compliant endpoints are available in US and Canada Regions:

  • com.amazonaws.region.airflow-fips.api

  • com.amazonaws.region.airflow-fips.env

For more information about supported Regions, see Amazon MWAA endpoints and quotas in the Amazon General Reference.