Skip to content

Conversation

shainaraskas
Copy link
Collaborator

@shainaraskas shainaraskas commented Sep 23, 2025

Adds procedure for cross-region support for AWS privatelink

this is the core change:
https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/3128/deploy-manage/security/private-connectivity-aws#ec-aws-inter-region-private-link
image

I've also

  • removed the consideration that we don't support cross-region privatelink
  • indicated the endpoint "type" to select (privatelink ready partner services, according to the screenshots in jira [internal])
  • updated a screenshot where there was a significant ui change in aws

question for reviewers

question about AZs in this new world. we have a consideration about AZs:

image

however, in the tutorial explaining the XR feature, amazon indicates that there is a change to the way AZs impact your configuration:

image

right now, we don't talk about selecting AZs that match the service provider availability. we do explain how to check your VPC endpoint availability, but we don't tell people to use this info in the setup. is this missing from the core setup procedure for non cross-region VPC endpoints?

Copy link

github-actions bot commented Sep 23, 2025

🔍 Preview links for changed docs

@shainaraskas shainaraskas marked this pull request as ready for review September 23, 2025 17:48
@shainaraskas shainaraskas requested a review from a team as a code owner September 23, 2025 17:48
@alxchalkias
Copy link
Contributor

@shainaraskas I think there's something that needs clarifying in the example:

VPC is in region 1, VPC endpoint is pointed to region 2 service name and enable cross region endpoint is also for region 2. If users were to follow the steps in "Create your VPC endpoint and DNS entries in AWS" there's a risk they will not be clear which service name the vpce should point to.

@shainaraskas
Copy link
Collaborator Author

shainaraskas commented Sep 24, 2025

VPC is in region 1, VPC endpoint is pointed to region 2 service name and enable cross region endpoint is also for region 2. If users were to follow the steps in "Create your VPC endpoint and DNS entries in AWS" there's a risk they will not be clear which service name the vpce should point to.

@alxchalkias this would explain why my verification failed when I tested. tested again with this approach and got a 🟢

I'll fix this.

Copy link
Contributor

@kilfoyle kilfoyle left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM! ⛵

Copy link
Contributor

@alxchalkias alxchalkias left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM! 🚀

@shainaraskas shainaraskas enabled auto-merge (squash) September 24, 2025 17:57
@shainaraskas shainaraskas merged commit 51fd8cd into main Sep 24, 2025
7 of 8 checks passed
@shainaraskas shainaraskas deleted the aws-pl-xr branch September 24, 2025 18:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants