Skip to main content

How to Setup AWS PrivateLink

  1. Provide the AWS account ID you are planning to connect to Databend Cloud:

    For example: 123456789012

  2. Verify your VPC settings

    VPC Settings

    Ensure Enable DNS resolution and Enable DNS hostnames are checked.

  3. Wait for cloud admin adding your account to whitelist, and get a service name for the cluster to connect to:

    For example: com.amazonaws.vpce.us-east-2.vpce-svc-0123456789abcdef0

  4. Prepare a security group with tcp 443 port open:

    Security Group

  5. Goto AWS Console:

    https://us-east-2.console.aws.amazon.com/vpcconsole/home?region=us-east-2#Endpoints:

    Click Create endpoint:

    Create Endpoint Button

    Create Endpoint Sheet

    Select the previously created security group HTTPS

    Create Endpoint SG

    Create Endpoint Done

  6. Wait for cloud admin approving your connect request:

    Request

  7. Wait for the PrivateLink creation:

    Creation

  8. Modify private DNS name setting:

    DNS Menu

    Enable private DNS names:

    DNS Sheet

    Wait for changes to apply.

  9. Verify accessing Databend Cloud via PrivateLink:

    Verify DNS

    Verify Response

    Gateway domain is resolved to VPC internal IP address.

info

Congratulations! You have successfully connected to Databend Cloud with AWS PrivateLink.