title: How to access Amazon DynamoDB service through a private VPC endpoint from another region?
body: <p>We have 2 regions, primary and secondary where the VPC is configured so that the EC2 instances in that VPC would make requests to a private VPC endpoint that would serve up DynamoDB from that region. Our Amazon DynamoDB tables are global tables. The goal is to have our requests stay within the Amazon network for security reasons.</p>
  <p>We have a scheduled task that would run on an EC2 instance in our primary region. We want to make it more resilient by having it failover DynamoDB requests to the secondary region in the event that the primary region DynamoDB service is degraded. This was recommend by AWS in the <a href="https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/V2globaltables_HowItWorks.html" rel="nofollow noreferrer">Availability and Durability</a> section.</p>
  <p>I've looked through these documentations: <a href="https://docs.aws.amazon.com/vpc/latest/privatelink/vpc-endpoints-ddb.html" rel="nofollow noreferrer">Endpoints for Amazon DynamoDB</a> and <a href="https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/vpc-endpoints-dynamodb.html" rel="nofollow noreferrer">Using Amazon VPC Endpoints to Access DynamoDB</a>, but they don't seem to offer any solution. Is it even possible to make requests to a private VPC endpoint from another region?</p>
  <p>The goal is to have multi-region resilient and good security by not having requests going out to the internet.</p>