Register a service once; any associated VPC can reach it.
No per-pair endpoint configuration — that's the whole point.
Service networkShared connectivity plane, VPCs associate into it
ServiceRegistered once, discovered automatically
Target group + IAM authRequest-level authorization, path routing, weighted splits
L7 gives Lattice path-based routing and canary traffic splitting — capabilities PrivateLink and peering structurally can't offer at all.