Hacker News Reader

Noob question but doesn't having a private VPC at least limit external users from accessing anything since they have to be part of the network?

A bucket policy can restrict access to only Access Points, which can in turn be restricted to VPC endpoints.

S3 buckets are accessible everywhere generally.

yes S3 is the one exception cause its global