For those customers require NO internet access for a VPC, CSR HA might break because it needs to talk to AWS EC2 API to shift the route. Using interface endpoint over private link perfectly solve the problem without any configuration changes on CSR, without an IGW (Internet Gateway).
Hope you find this video helpful!