update links

Author: Blargian

docs/cloud/_snippets/_security_table_of_contents.md

@@ -1,8 +1,8 @@
 | Page                                                          | Description                                                                                                                        |
 |---------------------------------------------------------------|------------------------------------------------------------------------------------------------------------------------------------|
-| [Shared Responsibility Model](shared-responsibility-model.md) | Understand how security responsibilities are divided between ClickHouse Cloud and your organization for different service types.   |
-| [Cloud Access Management](cloud-access-management/index.md)   | Manage user access with authentication, single sign-on (SSO), role-based permissions, and team invitations.                        |
-| [Connectivity](connectivity-overview.md)                      | Configure secure network access including IP allow-lists, private networking, S3 data access, and Cloud IP address management.     |
-| [Enhanced Encryption](cmek.md)                                | Learn about default AES 256 encryption and how to enable Transparent Data Encryption (TDE) for additional data protection at rest. |
-| [Audit Logging](audit-logging.md)                             | Set up and use audit logging to track and monitor activities in your ClickHouse Cloud environment.                                 |
-| [Privacy and Compliance](privacy-compliance-overview.md)      | Review security certifications, compliance standards, and learn how to manage your personal information and data rights.           |
+| [Shared Responsibility Model](/cloud/security/shared-responsibility-model) | Understand how security responsibilities are divided between ClickHouse Cloud and your organization for different service types.   |
+| [Cloud Access Management](/cloud/security/cloud-access-management)   | Manage user access with authentication, single sign-on (SSO), role-based permissions, and team invitations.                        |
+| [Connectivity](/cloud/security/connectivity)                      | Configure secure network access including IP allow-lists, private networking, S3 data access, and Cloud IP address management.     |
+| [Enhanced Encryption](/cloud/security/cmek)                                | Learn about default AES 256 encryption and how to enable Transparent Data Encryption (TDE) for additional data protection at rest. |
+| [Audit Logging](/cloud/security/audit-logging)                             | Set up and use audit logging to track and monitor activities in your ClickHouse Cloud environment.                                 |
+| [Privacy and Compliance](/cloud/security/privacy-compliance-overview)      | Review security certifications, compliance standards, and learn how to manage your personal information and data rights.           |

docs/cloud/api/api-overview.md

@@ -15,7 +15,7 @@ organizations and services on ClickHouse Cloud. Using our Cloud API, you can
 create and manage services, provision API keys, add or remove members in your 
 organization, and more.
 
-[Learn how to create your first API key and start using the ClickHouse Cloud API.](/cloud/manage/openapi.md)
+[Learn how to create your first API key and start using the ClickHouse Cloud API.](/cloud/manage/openapi)
 
 ## Swagger (OpenAPI) Endpoint and UI {#swagger-openapi-endpoint-and-ui}
 

docs/cloud/api/openapi.md

@@ -17,7 +17,7 @@ import Image from '@theme/IdealImage';
 ClickHouse Cloud provides an API utilizing OpenAPI that allows you to programmatically manage your account and aspects of your services.
 
 :::note
-This document covers the ClickHouse Cloud API. For database API endpoints, please see [Cloud Endpoints API](/cloud/get-started/query-endpoints.md)
+This document covers the ClickHouse Cloud API. For database API endpoints, please see [Cloud Endpoints API](/cloud/get-started/query-endpoints)
 :::
 
 1. You can use the **API Keys** tab on the left menu to create and manage your API keys.

docs/cloud/features/04_security/01_shared-responsibility-model.md

@@ -104,4 +104,4 @@ The model below generally addresses ClickHouse responsibilities and shows respon
   | HIPAA compliance                                                                                     | Available | AWS, GCP          | Enterprise              |
   | PCI compliance                                                                                       | Available | AWS               | Enterprise              |
 
-  For more information on supported compliance frameworks, please review our [Security and Compliance](/cloud/security/security-and-compliance) page.
+  For more information on supported compliance frameworks, please review our [Security and Compliance](/cloud/security/compliance-overview) page.

docs/cloud/features/04_security/connectivity/private_networking/aws-privatelink.md

@@ -374,7 +374,7 @@ jq .result.privateEndpointIds
 
 ### Connecting to a remote database {#connecting-to-a-remote-database}
 
-Let's say you are trying to use [MySQL](../../sql-reference/table-functions/mysql.md) or [PostgreSQL](../../sql-reference/table-functions/postgresql.md) table functions in ClickHouse Cloud and connect to your database hosted in an Amazon Web Services (AWS) VPC. AWS PrivateLink cannot be used to enable this connection securely. PrivateLink is a one-way, unidirectional connection. It allows your internal network or Amazon VPC to connect securely to ClickHouse Cloud, but it does not allow ClickHouse Cloud to connect to your internal network.
+Let's say you are trying to use [MySQL](/sql-reference/table-functions/mysql) or [PostgreSQL](/sql-reference/table-functions/postgresql) table functions in ClickHouse Cloud and connect to your database hosted in an Amazon Web Services (AWS) VPC. AWS PrivateLink cannot be used to enable this connection securely. PrivateLink is a one-way, unidirectional connection. It allows your internal network or Amazon VPC to connect securely to ClickHouse Cloud, but it does not allow ClickHouse Cloud to connect to your internal network.
 
 According to the [AWS PrivateLink documentation](https://docs.aws.amazon.com/whitepapers/latest/building-scalable-secure-multi-vpc-network-infrastructure/aws-privatelink.html):
 

docs/cloud/features/04_security/connectivity/private_networking/gcp-private-service-connect.md

@@ -421,7 +421,7 @@ curl --silent --user "${KEY_ID:?}:${KEY_SECRET:?}" -X GET -H "Content-Type: appl
 
 ### Connecting to a remote database {#connecting-to-a-remote-database}
 
-Let's say you are trying to use the [MySQL](../../sql-reference/table-functions/mysql.md) or [PostgreSQL](../../sql-reference/table-functions/postgresql.md) table functions in ClickHouse Cloud and connect to your database hosted in GCP. GCP PSC cannot be used to enable this connection securely. PSC is a one-way, unidirectional connection. It allows your internal network or GCP VPC to connect securely to ClickHouse Cloud, but it does not allow ClickHouse Cloud to connect to your internal network.
+Let's say you are trying to use the [MySQL](/sql-reference/table-functions/mysql) or [PostgreSQL](/sql-reference/table-functions/postgresql) table functions in ClickHouse Cloud and connect to your database hosted in GCP. GCP PSC cannot be used to enable this connection securely. PSC is a one-way, unidirectional connection. It allows your internal network or GCP VPC to connect securely to ClickHouse Cloud, but it does not allow ClickHouse Cloud to connect to your internal network.
 
 According to the [GCP Private Service Connect documentation](https://cloud.google.com/vpc/docs/private-service-connect):
 

docs/cloud/features/04_security/connectivity/private_networking/private-link-overview.md

@@ -9,6 +9,6 @@ description: 'Landing page for private link'
 
 ClickHouse Cloud provides the ability to connect your services to your cloud virtual network. Refer to the guides below for your provider:
 
-- [AWS private Link](/cloud/security/aws-privatelink.md)
-- [GCP private service connect](/cloud/security/gcp-private-service-connect.md)
-- [Azure private link](/cloud/security/azure-privatelink.md)
+- [AWS private Link](/manage/security/aws-privatelink)
+- [GCP private service connect](/manage/security/gcp-private-service-connect)
+- [Azure private link](/cloud/security/azure-privatelink)

docs/cloud/features/backups/export-backups-to-own-cloud-account.md

@@ -15,7 +15,7 @@ For details of how ClickHouse Cloud backups work, including "full" vs. "incremen
 Here we show examples of how to take full and incremental backups to AWS, GCP, Azure object storage as well as how to restore from the backups.
 
 :::note
-Users should be aware that any usage where backups are being exported to a different region in the same cloud provider, will incur [data transfer](../network-data-transfer.mdx) charges.  Currently we do not support cross cloud backups.
+Users should be aware that any usage where backups are being exported to a different region in the same cloud provider, will incur [data transfer](/cloud/manage/network-data-transfer) charges.  Currently we do not support cross cloud backups.
 :::
 
 ## Requirements {#requirements}

docs/cloud/features/upgrades.md

@@ -15,7 +15,7 @@ import scheduled_upgrade_window from '@site/static/images/cloud/manage/scheduled
 
 # Upgrades
 
-With ClickHouse Cloud you never have to worry about patching and upgrades. We roll out upgrades that include fixes, new features and performance improvements on a periodic basis. For the full list of what is new in ClickHouse refer to our [Cloud changelog](/cloud/reference/changelog.md).
+With ClickHouse Cloud you never have to worry about patching and upgrades. We roll out upgrades that include fixes, new features and performance improvements on a periodic basis. For the full list of what is new in ClickHouse refer to our [Cloud changelog](/whats-new/cloud).
 
 :::note
 We are introducing a new upgrade mechanism, a concept we call "make before break" (or MBB). With this new approach, we add updated replica(s) before removing the old one(s) during the upgrade operation. This results in more seamless upgrades that are less disruptive to running workloads.

docs/cloud/onboard/01_discover/02_use_cases/00_overview.md

@@ -18,4 +18,4 @@ Broadly, the most common use cases for ClickHouse Cloud are:
 | [Real-Time analytics](/cloud/get-started/cloud/use-cases/real-time-analytics)                | ClickHouse Cloud excels at real-time analytics by delivering sub-second query responses on billions of rows through its columnar storage architecture and vectorized execution engine. The platform handles high-throughput data ingestion of millions of events per second while enabling direct queries on raw data without requiring pre-aggregation. Materialized Views provide real-time aggregations and pre-computed results, while approximate functions for quantiles and counts deliver instant insights perfect for interactive dashboards and real-time decision making.|
 | [Data Lake and Warehouse](/cloud/get-started/cloud/use-cases/data_lake_and_warehouse)        | As a modern data warehouse solution, ClickHouse Cloud combines native cloud storage integration with S3, GCS, and Azure Blob for cost-effective storage with schema-on-read flexibility that supports semi-structured data like JSON and nested types. The platform achieves massive compression ratios of 10:1 or better, significantly reducing storage costs, while its compute-storage separation architecture allows independent scaling and cost optimization. Users benefit from a standard SQL interface enhanced with advanced analytics functions, making it easy to query and analyze data at any scale.|
 | [Observability](/cloud/get-started/cloud/use-cases/observability)                            | ClickHouse Cloud is purpose-built for observability workloads, featuring specialized engines and functions optimized for time-series data that can ingest and query terabytes of logs, metrics, and traces with ease. Through ClickStack, ClickHouse's comprehensive observability solution, organizations can break down the traditional three silos of logs, metrics, and traces by unifying all observability data in a single platform, enabling correlated analysis and eliminating the complexity of managing separate systems. This unified approach makes it ideal for application performance monitoring, infrastructure monitoring, and security event analysis at enterprise scale, with ClickStack providing the tools and integrations needed for complete observability workflows without data silos.|
-| [Machine Learning and GenAI](/cloud/get-started/cloud/use-cases/machine_learning_and_gen_ai) | ClickHouse Cloud powers modern AI applications through four key capabilities: native vector similarity search for RAG applications and embedding storage, comprehensive feature store functionality for real-time ML feature engineering and serving, specialized LLM observability for tracking model performance and usage patterns, and integrated MCP (Model Context Protocol) server support that enables AI agents and LLMs to directly query and analyze data. This unified platform eliminates the complexity of managing separate systems for vector databases, feature stores, and observability tools, providing a single solution for the entire AI/ML data pipeline with ClickHouse's signature performance and scalability.|
+| [Machine Learning and GenAI](/cloud/get-started/cloud/use-cases/AI_ML) | ClickHouse Cloud powers modern AI applications through four key capabilities: native vector similarity search for RAG applications and embedding storage, comprehensive feature store functionality for real-time ML feature engineering and serving, specialized LLM observability for tracking model performance and usage patterns, and integrated MCP (Model Context Protocol) server support that enables AI agents and LLMs to directly query and analyze data. This unified platform eliminates the complexity of managing separate systems for vector databases, feature stores, and observability tools, providing a single solution for the entire AI/ML data pipeline with ClickHouse's signature performance and scalability.|