Egress PrivateLink Endpoints Setup Guide: First-Party Services on AWS for Confluent Cloud

This topic presents the steps for setting up Egress PrivateLink Endpoints for the AWS first-party services on AWS and Confluent Cloud to enable fully managed connectors in Confluent Cloud using AWS PrivateLink.

Prerequisites

In Confluent Cloud, one of the following cluster types was set up with the specified network resource:

• A Dedicated cluster with a Confluent Cloud network

  For the steps to create a Confluent Cloud network, see Create a Confluent Cloud network. The Connection type of the network needs to be “PrivateLink Access”.

• A Enterprise cluster with a network gateway

  For the steps to create a gateway, see Create a gateway for outbound connectivity in Confluent Cloud.

Step 1. Create an Egress PrivateLink Endpoint

Confluent Cloud Egress PrivateLink Endpoints are AWS interface VPC Endpoints used to connect to AWS PrivateLink Services.

Dedicated clusterEnterprise cluster

1. In the Network management page or tab of the desired Confluent Cloud environment, click the Confluent Cloud network you want to add the PrivateLink Endpoint to. The Connection Type of the network needs to be “PrivateLink Access”.

2. Click Create endpoint in the Egress connections tab.

3. Click the service you want to connect to. Select Other if you do not see the specific service.

4. Follow the guided steps to specify the field values, including:

   • Name: Name of the PrivateLink Endpoint.

   • PrivateLink service name: The name of the PrivateLink service.

     The applicable service name can be retrieved from the AWS Services Privatelink Support page, for example, com.amazonaws.<region>.<service>.

   • Create an endpoint with high availability: Check the box if you wish to deploy an endpoint with High Availability.

     Endpoints deployed with high availability have network interfaces deployed in multiple availability zones.

5. Click Create to create the PrivateLink Endpoint.

6. If there are additional steps for the specific target service, follow the prompt to complete the tasks, and then click Finish.

Step 2. Create the DNS record

Dedicated clusterEnterprise cluster

1. When the PrivateLink Endpoint status transitions to “Ready”, click Create DNS record in the Egress DNS tab, or click Create Record on the associated PrivateLink Endpoint tile.

2. Specify the following:

   • Access point: The Egress PrivateLink Endpoint you created in the Step 1 section above.
   • Domain: Associated service endpoint (<service>.<region>.amazonaws.com).

   Links to AWS Service endpoints can be found on AWS Service Information.

3. Click Save to create the record.

Step 3. Create the Connector

1. When the DNS Record status transitions to “Ready”, you can create the connector.
2. For the steps to create the connector, refer to the connector-specific documentation that is listed for your specific connector in Supported connectors.