Skip to content

Commit 718ee6b

Browse files
committed
address eng comments [netlify-build]
1 parent f96bbcf commit 718ee6b

File tree

1 file changed

+19
-20
lines changed

1 file changed

+19
-20
lines changed

src/connections/storage/aws-privatelink-beta.md

Lines changed: 19 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@ hidden: true
88
> info ""
99
> Segment's PrivateLink integration is currently in private beta and is governed by Segment’s [First Access and Beta Preview Terms](https://www.twilio.com/en-us/legal/tos){:target="_blank”}. Only warehouses located in region `us-east-1` are eligible for PrivateLink. You might incur additional networking costs while using AWS PrivateLink.
1010
11-
You can set up AWS PrivateLink for [Databricks](#databricks), [RDS Postgres](#rds-postgres), and [Redshift](#redshift).
11+
During the Private Beta, you can set up AWS PrivateLink for [Databricks](#databricks), [RDS Postgres](#rds-postgres), and [Redshift](#redshift).
1212

1313
## Databricks
1414

@@ -22,48 +22,47 @@ Before you can configure AWS PrivateLink for Databricks, complete the following
2222
- Configure your [VPC](https://docs.databricks.com/en/security/network/classic/customer-managed-vpc.html){:target="_blank”} with DNS hostnames and DNS resolution
2323
- Configure a [security group](https://docs.databricks.com/en/security/network/classic/customer-managed-vpc.html#security-groups){:target="_blank”} with bidirectional access to 0.0.0/0 and ports 443, 3306, 6666, 2443, and 8443-8451.
2424

25-
> warning ""
26-
> Only resources in the `us-east-1` region support Segment's PrivateLink integration.
27-
2825
### Configure PrivateLink for Databricks
2926
To configure PrivateLink for Databricks:
3027
1. Follow the instructions in Databricks' [Enable private connectivity using AWS PrivateLink](https://docs.databricks.com/en/security/network/classic/privatelink.html){:target="_blank”} documentation. You must create a [back-end](https://docs.databricks.com/en/security/network/classic/privatelink.html#private-connectivity-overview){:target="_blank”} connection to integrate with Segment's front-end connection.
3128
2. After you've configured a back-end connection for Databricks, request access to Segment's PrivateLink integration by reaching out to your Customer Success Manager (CSM).
3229
3. Your CSM sets up a call with Segment R&D to continue the onboarding process.
3330

31+
The following Databricks integrations support PrivateLink:
32+
- [Databricks storage destination](/docs/connections/storage/catalog/databricks/)
33+
- [Databricks Reverse ETL source](/docs/connections/reverse-etl/reverse-etl-source-setup-guides/databricks-setup/)
34+
3435
## RDS Postgres
3536

36-
> warning ""
37-
> Only resources in the `us-east-1` region support Segment's PrivateLink integration.
37+
### Prerequisites
38+
Before you can configure AWS PrivateLink for RDS Postgres, complete the following prerequisites in your Databricks workspace:
39+
- **Set up a Network Load Balancer (NLB) to route traffic to your Postgres database**: Segment recommends creating a NLB that has target group IP address synchronization, using a solution like AWS Lambda.
40+
- **Configure your NLB with one of the following settings**:
41+
- Disable the **Enforce inbound rules on PrivateLink traffic** setting
42+
- Add an inbound rule that allows traffic belonging from Segment's `us-east-1` PrivateLink/Edge CIDR: `10.248.64.0/18`
3843

44+
### Configure PrivateLink for RDS Postgres
3945
1. Create a Network Load Balancer VPC endpoint service using the instructions in the [Create a service powered by AWS PrivateLink](https://docs.aws.amazon.com/vpc/latest/privatelink/create-endpoint-service.html){:target="_blank”} documentation.
4046
2. Reach out to your Customer Success Manager (CSM) for more details about Segment's AWS principal.
4147
3. Add the Segment AWS principal as an “Allowed Principal” to consume the Network Load Balancer VPC endpoint service you created in step 1.
42-
4. Reach out to your CSM and provide them with the name of the service that you created above. Segment's engineering team provisions a VPC endpoint for the service in the Segment Edge VPC.
43-
5. After creating the VPC, Segment either provides you with private DNS so you can configure the feature in the Segment app or creates an RDS Postgres integration in the Segment app on your behalf. This integration is already configured with the connection settings you need to power AWS PrivateLink. <br> The following RDS Postgres integrations support PrivateLink:
48+
4. Reach out to your CSM and provide them with the Service name for the service that you created above. Segment's engineering team provisions a VPC endpoint for the service in the Segment Edge VPC.
49+
5. After creating the VPC, Segment provides you with private DNS so you can update the **Host** in your Segment app settings or create a new Redshift integration. <br> The following RDS Postgres integrations support PrivateLink:
4450
- [RDS Postgres storage destination](/docs/connections/storage/catalog/postgres/)
4551
- [RDS Postgres Reverse ETL source](/docs/connections/reverse-etl/reverse-etl-source-setup-guides/postgres-setup/)
46-
- [RDS Postgres Profiles Sync destination](/docs/unify/profiles-sync/profiles-sync-setup/#step-1-select-a-warehouse)
4752

4853
## Redshift
4954

50-
> warning ""
51-
> Only resources in the `us-east-1` region support Segment's PrivateLink integration.
52-
5355
### Prerequisites
54-
- **You're using the RA3 node type**: <br>To access Segment's PrivateLink integration, use one of the following RA3 instance types:
55-
- ra3.16xlarge
56-
- ra3.4xlarge
57-
- ra3.xlplus
56+
- **You're using the RA3 node type**: To access Segment's PrivateLink integration, use an RA3 instance.
5857
- **You've enabled cluster relocation**: Cluster relocation migrates your cluster behind a proxy and keeps the cluster endpoint unchanged, even if your cluster needs to be migrated to a new Availability Zone. A consistent cluster endpoint makes it possible for Segment's Edge account and VPC to remain connected to your cluster. To enable cluster relocation, follow the instructions in the AWS [Relocating your cluster](https://docs.aws.amazon.com/redshift/latest/mgmt/managing-cluster-recovery.html){:target="_blank”} documentation.
59-
- **Your cluster is using a port within the ranges 5431-5455 or 8191-8215**: Clusters with cluster relocation enabled [might encounter an error if updated to include a port outside of this range](https://docs.aws.amazon.com/redshift/latest/mgmt/managing-cluster-recovery.html#:~:text=You%20can%20change%20to%20another%20port%20from%20the%20port%20range%20of%205431%2D5455%20or%208191%2D8215.%20(Don%27t%20change%20to%20a%20port%20outside%20the%20ranges.%20It%20results%20in%20an%20error.)){:target="_blank”}.
58+
- **Your warehouse is using port range 5431-5455 and 8191-8215**: Clusters with cluster relocation enabled [might encounter an error if updated to include a port outside of this range](https://docs.aws.amazon.com/redshift/latest/mgmt/managing-cluster-recovery.html#:~:text=You%20can%20change%20to%20another%20port%20from%20the%20port%20range%20of%205431%2D5455%20or%208191%2D8215.%20(Don%27t%20change%20to%20a%20port%20outside%20the%20ranges.%20It%20results%20in%20an%20error.)){:target="_blank”}.
6059

6160
### Configure PrivateLink for Redshift
6261
Implement Segment's PrivateLink integration by taking the following steps:
6362
1. Let your Customer Success Manager (CSM) know that you're interested in PrivateLink. They will share information with you about Segment’s Edge account and VPC.
6463
2. After you receive the Edge account and VPC, [grant cluster access to Segment's Edge account and VPC](https://docs.aws.amazon.com/redshift/latest/gsg/rs-gsg-connect-to-cluster.html){:target="_blank”}.
65-
3. Segment creates a Redshift managed VPC endpoint within the Segment Redshift subnet on your behalf, which creates a PrivateLink Endpoint URL. Segment then provides you with the internal PrivateLink Endpoint URL.
66-
4. After Segment provides you with the URL, use it to update or create new Redshift integrations. The following integrations support PrivateLink:
64+
3. Reach back out to your CSM and provide them with the Cluster identifier for your cluster and your and AWS account ID.
65+
4. Segment creates a Redshift managed VPC endpoint within the Segment Redshift subnet on your behalf, which creates a PrivateLink Endpoint URL. Segment then provides you with the internal PrivateLink Endpoint URL.
66+
5. After Segment provides you with the URL, use it to update or create new Redshift integrations. The following integrations support PrivateLink:
6767
- [Redshift storage destination](/docs/connections/storage/catalog/redshift/)
6868
- [Redshift Reverse ETL source](/docs/connections/reverse-etl/reverse-etl-source-setup-guides/redshift-setup/)
69-
- [Redshift Profiles Sync destination](/docs/unify/profiles-sync/profiles-sync-setup/#step-1-select-a-warehouse)

0 commit comments

Comments
 (0)