Amazon DynamoDB Streams now comes with AWS private link support, allowing you to invoke DynamoDB Streams APIs from within your VPC without traversing the public internet.
So, yeah, it's sort of, you know, two key services and then now they come together or you basically get to see the user activity as it pertains to your VPC.
VPC Block Public Access, or BPA, supersedes any other setting and ensures your VPC resources are protected from unfettered internet access in compliance with your organization's security and governance policy.
This is a new centralized declarative control that enables network and security administrators to authoritatively block internet traffic for their VPCs.
With VPC Origins, customers can now have their ALB, NLB, and EC2 instances in a private subnet, which is accessible only through their CloudFront distributions.