See https://aws.amazon.com/privatelink/. If you choose AWS PrivateLink, create a Service Endpoint for AWS PrivateLink.