Amazon Quick on a private network: PrivateLink's two planes and where they leak

Deep dive into private Amazon Quick access: interface endpoints, VPC connections, DNS, policies, aws:SourceVpce and the domains that still need public egress.