Air-gapped and isolated environments

The AWS console's static assets now arrive over PrivateLink instead of a NAT gateway

Console Private Access is generally available for VPCs with no route to the internet, which turns the egress exception regulated teams have been renewing since 2023 into a question about which specific consoles are on the supported list.