- Adds a new "tunnel" VPC endpoint type for PrivateLink, enabling private, secure access to network segments in another VPC or account.
- Allows customers to share CIDR ranges via AWS RAM, with vendors creating tunnel endpoints that use GENEVE encapsulation to reach those resources.
- Introduces hourly and per‑GB charges for tunnel endpoints and expands availability across multiple AWS regions; see updated documentation.