I am trying to access S3 files from non-EC2 machine. non-EC2 machine is connected to VPC over VPN, also can reach to other hosts in VPC.

I am able to download (wget) file from S3 to EC2 in the VPC. When I try to do same (wget) from non-EC2 (which is in Data Centre), I get timeout.

Anyone know what I need to do to get this working ?

  • This is exactly what I'm trying to do..
    – monkut
    Jul 18, 2019 at 2:50

1 Answer 1


You need to use...

  • the Internet, from your data center, to access S3 directly (not via the endpoint) or
  • an AWS DirectConnect connection to access S3 directly (not via the endpoint) or
  • an HTTP proxy server inside this VPC to access S3 (via the endpoint)

...because S3 endpoints are not designed to be used across VPN connections. They are only accessible from instances in the VPC where they exist.

Endpoint connections cannot be extended out of a VPC. Resources on the other side of a VPN connection, VPC peering connection, AWS Direct Connect connection, or ClassicLink connection in your VPC cannot use the endpoint to communicate with resources in the endpoint service.


  • If I go with HTTP proxy server inside this VPC, can I still access rest of the VPC as it is ? or I need to whitelist it in proxy server ?
    – rp346
    Dec 17, 2018 at 22:13

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.