You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: content/operate/rc/security/aws-privatelink.md
+17-5Lines changed: 17 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -10,7 +10,7 @@ linkTitle: AWS PrivateLink
10
10
weight: 90
11
11
---
12
12
13
-
[Amazon Web Services (AWS) PrivateLink](https://docs.aws.amazon.com/vpc/latest/privatelink/privatelink-access-resources.html) allows you to securely connect your Amazon virtual private cloud(s) (VPCs) to Redis Cloud without using public IP addresses or traversing the public internet. PrivateLink provides private connectivity between VPCs, simplifying your network architecture and reducing exposure to security threats.
13
+
[Amazon Web Services (AWS) PrivateLink](https://docs.aws.amazon.com/vpc/latest/privatelink/privatelink-access-resources.html) allows service providers to securely expose specific services without exposing the entire service provider and consumer VPCs to each other. When you use AWS PrivateLink to connect to Redis Cloud, you can connect to your database as if it was already in your own AWS VPC.
14
14
15
15
{{< note >}}
16
16
Connecting to Redis Cloud with an AWS PrivateLink is available only with Redis Cloud Pro. It is not supported for Redis Cloud Essentials.
@@ -31,7 +31,19 @@ AWS PrivateLink provides the following benefits over VPC Peering:
31
31
Be aware of the following limitations when using PrivateLink with Redis Cloud:
32
32
- You cannot use the [OSS Cluster API]({{< relref "/operate/rc/databases/create-database#oss-cluster-api" >}}) with PrivateLink.
33
33
- Redis Cloud [Bring your Own Cloud]({{< relref "/operate/rc/subscriptions/bring-your-own-cloud" >}}) subscriptions are not supported with PrivateLink.
34
-
- Redis Cloud subscriptions with AWS PrivateLink are limited to a maximum of 35 databases.
34
+
- Redis Cloud subscriptions with AWS PrivateLink are limited to a maximum of 55 databases. [Contact support](https://redis.com/company/support/) if you need more than 55 databases with AWS PrivateLink.
35
+
- Your subnets must have at least 16 available IP addresses for the resource endpoint.
36
+
- Redis Cloud's PrivateLink implementation is based on Amazon VPC Lattice, so the [VPC Lattice quotas](https://docs.aws.amazon.com/vpc-lattice/latest/ug/quotas.html) apply. Currently, the following availability zones are not supported with Amazon VPC Lattice:
37
+
-`use1-az3`
38
+
-`usw1-az2`
39
+
-`apne1-az3`
40
+
-`apne2-az2`
41
+
-`euc1-az2`
42
+
-`euw1-az4`
43
+
-`cac1-az3`
44
+
-`ilc1-az2`
45
+
46
+
We recommend avoiding these availability zones when creating your Redis Cloud database if you plan to use AWS PrivateLink.
35
47
36
48
## Prerequisites
37
49
@@ -87,9 +99,9 @@ In this step, you will associate the Redis Cloud resource share with an AWS prin
87
99
88
100
1. After sharing the resource share with the principal, [accept the resource share in the Resource Access Manager](https://docs.aws.amazon.com/ram/latest/userguide/working-with-shared-invitations.html) or copy the **Accept resource share** command and run it with the AWS CLI.
89
101
90
-
After you accept the resource share, the Redis Cloud console will show the resource share as **Accepted**.
102
+
After you accept the resource share, the Redis Cloud console will show the principal as **Accepted**.
91
103
92
-
{{<imagefilename="images/rc/privatelink-resource-share-accepted.png"width="80%"alt="The Resource Share section, with the resource share accepted." >}}
104
+
{{<imagefilename="images/rc/privatelink-principal-accepted.png"width="80%"alt="The Consumer Principals section, with the consumer principal shown as accepted." >}}
93
105
94
106
You can add additional principals to the resource share at any time.
95
107
@@ -141,7 +153,7 @@ To use the AWS CLI to connect to an already existing service network, select **C
141
153
142
154
{{< /multitabs >}}
143
155
144
-
After you've connected to Redis Cloud with a VPC resource endpoint or a VPC lattice service network, download the **Discovery script** and run it in your consumer account to discover the database endpoints.
156
+
After you've connected to Redis Cloud with a VPC resource endpoint or a VPC lattice service network, download the **Discovery script** and run it in your consumer VPC to discover the database endpoints.
145
157
146
158
After you've connected to your database, you can view the connection details in the Redis Cloud console in your subscription's **Connectivity > PrivateLink** tab.
0 commit comments