AWS Storage Gateway Gets Private FIPS Endpoints – No More Public Internet Required
AWS Storage Gateway now lets you run FIPS 140-3 validated encryption over AWS PrivateLink, keeping your regulated workloads completely off the public internet. Tape Gateway and Volume Gateway can activate with FIPS endpoints in eight AWS regions (US, Canada, and GovCloud), requiring gateway software version 3.2.7 or later.
source: [aws/whats-new]