[NovemberWhiskey]

>almost no AWS API can be used from a VPC without public IPv4 addresses

Virtually every single application at the company I work at deploys into VPCs without public IPv4 addresses - this seems like a ridiculous claim.

[apparentorder]

As mentioned in the footnote, this can be done by using PrivateLink; it costs a few bucks too, but it is the way to go if your VPC does not (or must not, for Compliance™ reasons) have internet connectivity.

If your target VPC has neither PrivateLink nor public IPv4 connectivity somewhere, I'm not sure how that would work; I'd love to learn how that was built.

[NovemberWhiskey]

Yeah, sure, we use PrivateLink. In my opinion, it's clickbait to say "almost no AWS API can be used from a VPC without public IPv4 addresses" with a footnote "actually most can if you use the service that enables that".

[ericpauley]

Do they use NAT gateways? These require public IPs.

[NovemberWhiskey]

No; we use AWS Direct Connect for access from our on-premise networks.