Skip to content

Commit d5446d3

Browse files
committed
Feedback from Jonathan
1 parent 31cd4d0 commit d5446d3

File tree

1 file changed

+17
-5
lines changed

1 file changed

+17
-5
lines changed

content/operate/rc/security/aws-privatelink.md

Lines changed: 17 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@ linkTitle: AWS PrivateLink
1010
weight: 90
1111
---
1212

13-
[Amazon Web Services (AWS) PrivateLink](https://docs.aws.amazon.com/vpc/latest/privatelink/privatelink-access-resources.html) allows you to securely connect your Amazon virtual private cloud(s) (VPCs) to Redis Cloud without using public IP addresses or traversing the public internet. PrivateLink provides private connectivity between VPCs, simplifying your network architecture and reducing exposure to security threats.
13+
[Amazon Web Services (AWS) PrivateLink](https://docs.aws.amazon.com/vpc/latest/privatelink/privatelink-access-resources.html) allows service providers to securely expose specific services without exposing the entire service provider and consumer VPCs to each other. When you use AWS PrivateLink to connect to Redis Cloud, you can connect to your database as if it was already in your own AWS VPC.
1414

1515
{{< note >}}
1616
Connecting to Redis Cloud with an AWS PrivateLink is available only with Redis Cloud Pro. It is not supported for Redis Cloud Essentials.
@@ -31,7 +31,19 @@ AWS PrivateLink provides the following benefits over VPC Peering:
3131
Be aware of the following limitations when using PrivateLink with Redis Cloud:
3232
- You cannot use the [OSS Cluster API]({{< relref "/operate/rc/databases/create-database#oss-cluster-api" >}}) with PrivateLink.
3333
- Redis Cloud [Bring your Own Cloud]({{< relref "/operate/rc/subscriptions/bring-your-own-cloud" >}}) subscriptions are not supported with PrivateLink.
34-
- Redis Cloud subscriptions with AWS PrivateLink are limited to a maximum of 35 databases.
34+
- Redis Cloud subscriptions with AWS PrivateLink are limited to a maximum of 55 databases. [Contact support](https://redis.com/company/support/) if you need more than 55 databases with AWS PrivateLink.
35+
- Your subnets must have at least 16 available IP addresses for the resource endpoint.
36+
- Redis Cloud's PrivateLink implementation is based on Amazon VPC Lattice, so the [VPC Lattice quotas](https://docs.aws.amazon.com/vpc-lattice/latest/ug/quotas.html) apply. Currently, the following availability zones are not supported with Amazon VPC Lattice:
37+
- `use1-az3`
38+
- `usw1-az2`
39+
- `apne1-az3`
40+
- `apne2-az2`
41+
- `euc1-az2`
42+
- `euw1-az4`
43+
- `cac1-az3`
44+
- `ilc1-az2`
45+
46+
We recommend avoiding these availability zones when creating your Redis Cloud database if you plan to use AWS PrivateLink.
3547

3648
## Prerequisites
3749

@@ -87,9 +99,9 @@ In this step, you will associate the Redis Cloud resource share with an AWS prin
8799

88100
1. After sharing the resource share with the principal, [accept the resource share in the Resource Access Manager](https://docs.aws.amazon.com/ram/latest/userguide/working-with-shared-invitations.html) or copy the **Accept resource share** command and run it with the AWS CLI.
89101

90-
After you accept the resource share, the Redis Cloud console will show the resource share as **Accepted**.
102+
After you accept the resource share, the Redis Cloud console will show the principal as **Accepted**.
91103

92-
{{<image filename="images/rc/privatelink-resource-share-accepted.png" width="80%" alt="The Resource Share section, with the resource share accepted." >}}
104+
{{<image filename="images/rc/privatelink-principal-accepted.png" width="80%" alt="The Consumer Principals section, with the consumer principal shown as accepted." >}}
93105

94106
You can add additional principals to the resource share at any time.
95107

@@ -141,7 +153,7 @@ To use the AWS CLI to connect to an already existing service network, select **C
141153

142154
{{< /multitabs >}}
143155

144-
After you've connected to Redis Cloud with a VPC resource endpoint or a VPC lattice service network, download the **Discovery script** and run it in your consumer account to discover the database endpoints.
156+
After you've connected to Redis Cloud with a VPC resource endpoint or a VPC lattice service network, download the **Discovery script** and run it in your consumer VPC to discover the database endpoints.
145157

146158
After you've connected to your database, you can view the connection details in the Redis Cloud console in your subscription's **Connectivity > PrivateLink** tab.
147159

0 commit comments

Comments
 (0)