diff --git a/docs/vpcep/umn/ALL_META.TXT.json b/docs/vpcep/umn/ALL_META.TXT.json index b51faf1c7..25fb9afd4 100644 --- a/docs/vpcep/umn/ALL_META.TXT.json +++ b/docs/vpcep/umn/ALL_META.TXT.json @@ -843,7 +843,7 @@ "node_id":"vpcep_03_0202.xml", "product_code":"vpcep", "code":"45", - "des":"After a VPC endpoint is created, you can query its details and access it.One VPC endpoint supports up to 3,000 concurrent connections.Perform the following operations to ", + "des":"After a VPC endpoint is created, you can query its details and access it.One VPC endpoint supports up to 3,000 concurrent connections.You can query details of a VPC endpo", "doc_type":"usermanual", "kw":"Querying and Accessing a VPC Endpoint,VPC Endpoints,User Guide", "search_title":"", @@ -876,11 +876,29 @@ "title":"Deleting a VPC Endpoint", "githuburl":"" }, + { + "uri":"vpcep_03_0205.html", + "node_id":"vpcep_03_0205.xml", + "product_code":"vpcep", + "code":"47", + "des":"To control IP addresses and CIDR blocks that can access a VPC endpoint, configure a whitelist. You can add or delete a whitelist record, or disable access control if you ", + "doc_type":"usermanual", + "kw":"Configuring Access Control for a VPC Endpoint,VPC Endpoints,User Guide", + "search_title":"", + "metedata":[ + { + "documenttype":"usermanual", + "prodname":"vpcep" + } + ], + "title":"Configuring Access Control for a VPC Endpoint", + "githuburl":"" + }, { "uri":"vpcep_03_0206.html", "node_id":"vpcep_03_0206.xml", "product_code":"vpcep", - "code":"47", + "code":"48", "des":"After a VPC endpoint is created, you can view its tags, or add, edit, or delete a tag.Tags help identify VPC endpoints. You can add up to 20 tags to each VPC endpoint.If ", "doc_type":"usermanual", "kw":"Managing Tags of a VPC Endpoint,VPC Endpoints,User Guide", @@ -899,7 +917,7 @@ "uri":"vpcep_ug_0001.html", "node_id":"vpcep_ug_0001.xml", "product_code":"vpcep", - "code":"48", + "code":"49", "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", "doc_type":"usermanual", "kw":"Permissions Management", @@ -918,7 +936,7 @@ "uri":"vpcep_ug_0003.html", "node_id":"vpcep_ug_0003.xml", "product_code":"vpcep", - "code":"49", + "code":"50", "des":"Use IAM to implement fine-grained permissions control over your VPC Endpoint resources. With IAM, you can:Create IAM users for employees based on your enterprise's organi", "doc_type":"usermanual", "kw":"Creating a User and Granting VPC Endpoint Permissions,Permissions Management,User Guide", @@ -937,8 +955,8 @@ "uri":"vpcep_03_0500.html", "node_id":"vpcep_03_0500.xml", "product_code":"vpcep", - "code":"50", - "des":"Quotas can limit the number or amount of resources available to users, such as the maximum number of ECSs or EVS disks that can be created.If the existing resource quota ", + "code":"51", + "des":"Quotas can limit the number or amount of resources available to users, such as the maximum number of ECS or EVS disks that can be created.If the existing resource quota c", "doc_type":"usermanual", "kw":"Quotas,User Guide", "search_title":"", @@ -955,7 +973,7 @@ "uri":"vpcep_04_0000.html", "node_id":"vpcep_04_0000.xml", "product_code":"vpcep", - "code":"51", + "code":"52", "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", "doc_type":"usermanual", "kw":"FAQ", @@ -974,7 +992,7 @@ "uri":"en-us_topic_0138838187.html", "node_id":"en-us_topic_0138838187.xml", "product_code":"vpcep", - "code":"52", + "code":"53", "des":"Confirm that the security group of the ECS NIC is correctly configured.On the ECS details page, view the security group details.Check whether the security group permits I", "doc_type":"usermanual", "kw":"What Should I Do If the VPC Endpoint I Purchased Cannot Connect to a VPC Endpoint Service?,FAQ,User ", @@ -993,7 +1011,7 @@ "uri":"vpcep_04_0004.html", "node_id":"vpcep_04_0004.xml", "product_code":"vpcep", - "code":"53", + "code":"54", "des":"Table 1 describes differences between VPC endpoints and VPC peering connections.VPC endpoints and VPC peering connections are two different resources. You can configure e", "doc_type":"usermanual", "kw":"What Are the Differences Between VPC Endpoints and VPC Peering Connections?,FAQ,User Guide", @@ -1012,7 +1030,7 @@ "uri":"vpcep_04_0005.html", "node_id":"vpcep_04_0005.xml", "product_code":"vpcep", - "code":"54", + "code":"55", "des":"Table 1 describes statuses of a VPC endpoint service and their meanings.Statuses of a VPC endpoint serviceStatusDescriptionCreatingIndicates that the VPC endpoint service", "doc_type":"usermanual", "kw":"What Statuses Are Available for a VPC Endpoint Service and VPC Endpoint?,FAQ,User Guide", @@ -1031,7 +1049,7 @@ "uri":"vpcep_04_0006.html", "node_id":"vpcep_04_0006.xml", "product_code":"vpcep", - "code":"55", + "code":"56", "des":"VPC endpoint services cannot be accessed across regions. VPC Endpoint supports only access to cloud services or users' private services in VPCs in the same region.", "doc_type":"usermanual", "kw":"Does VPC Endpoint Support Cross-Region Access?,FAQ,User Guide", @@ -1050,7 +1068,7 @@ "uri":"vpcep_0_0002.html", "node_id":"vpcep_0_0002.xml", "product_code":"vpcep", - "code":"56", + "code":"57", "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", "doc_type":"usermanual", "kw":"Change History,User Guide", @@ -1069,7 +1087,7 @@ "uri":"vpcep_0_0003.html", "node_id":"vpcep_0_0003.xml", "product_code":"vpcep", - "code":"57", + "code":"58", "des":"For details about the terms involved in this document, see Glossary.", "doc_type":"usermanual", "kw":"Glossary,User Guide", diff --git a/docs/vpcep/umn/CLASS.TXT.json b/docs/vpcep/umn/CLASS.TXT.json index 3e751264d..a576ec70b 100644 --- a/docs/vpcep/umn/CLASS.TXT.json +++ b/docs/vpcep/umn/CLASS.TXT.json @@ -396,7 +396,7 @@ "code":"44" }, { - "desc":"After a VPC endpoint is created, you can query its details and access it.One VPC endpoint supports up to 3,000 concurrent connections.Perform the following operations to ", + "desc":"After a VPC endpoint is created, you can query its details and access it.One VPC endpoint supports up to 3,000 concurrent connections.You can query details of a VPC endpo", "product_code":"vpcep", "title":"Querying and Accessing a VPC Endpoint", "uri":"vpcep_03_0202.html", @@ -413,6 +413,15 @@ "p_code":"42", "code":"46" }, + { + "desc":"To control IP addresses and CIDR blocks that can access a VPC endpoint, configure a whitelist. You can add or delete a whitelist record, or disable access control if you ", + "product_code":"vpcep", + "title":"Configuring Access Control for a VPC Endpoint", + "uri":"vpcep_03_0205.html", + "doc_type":"usermanual", + "p_code":"42", + "code":"47" + }, { "desc":"After a VPC endpoint is created, you can view its tags, or add, edit, or delete a tag.Tags help identify VPC endpoints. You can add up to 20 tags to each VPC endpoint.If ", "product_code":"vpcep", @@ -420,7 +429,7 @@ "uri":"vpcep_03_0206.html", "doc_type":"usermanual", "p_code":"42", - "code":"47" + "code":"48" }, { "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", @@ -429,7 +438,7 @@ "uri":"vpcep_ug_0001.html", "doc_type":"usermanual", "p_code":"", - "code":"48" + "code":"49" }, { "desc":"Use IAM to implement fine-grained permissions control over your VPC Endpoint resources. With IAM, you can:Create IAM users for employees based on your enterprise's organi", @@ -437,17 +446,17 @@ "title":"Creating a User and Granting VPC Endpoint Permissions", "uri":"vpcep_ug_0003.html", "doc_type":"usermanual", - "p_code":"48", - "code":"49" + "p_code":"49", + "code":"50" }, { - "desc":"Quotas can limit the number or amount of resources available to users, such as the maximum number of ECSs or EVS disks that can be created.If the existing resource quota ", + "desc":"Quotas can limit the number or amount of resources available to users, such as the maximum number of ECS or EVS disks that can be created.If the existing resource quota c", "product_code":"vpcep", "title":"Quotas", "uri":"vpcep_03_0500.html", "doc_type":"usermanual", "p_code":"", - "code":"50" + "code":"51" }, { "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", @@ -456,7 +465,7 @@ "uri":"vpcep_04_0000.html", "doc_type":"usermanual", "p_code":"", - "code":"51" + "code":"52" }, { "desc":"Confirm that the security group of the ECS NIC is correctly configured.On the ECS details page, view the security group details.Check whether the security group permits I", @@ -464,8 +473,8 @@ "title":"What Should I Do If the VPC Endpoint I Purchased Cannot Connect to a VPC Endpoint Service?", "uri":"en-us_topic_0138838187.html", "doc_type":"usermanual", - "p_code":"51", - "code":"52" + "p_code":"52", + "code":"53" }, { "desc":"Table 1 describes differences between VPC endpoints and VPC peering connections.VPC endpoints and VPC peering connections are two different resources. You can configure e", @@ -473,8 +482,8 @@ "title":"What Are the Differences Between VPC Endpoints and VPC Peering Connections?", "uri":"vpcep_04_0004.html", "doc_type":"usermanual", - "p_code":"51", - "code":"53" + "p_code":"52", + "code":"54" }, { "desc":"Table 1 describes statuses of a VPC endpoint service and their meanings.Statuses of a VPC endpoint serviceStatusDescriptionCreatingIndicates that the VPC endpoint service", @@ -482,8 +491,8 @@ "title":"What Statuses Are Available for a VPC Endpoint Service and VPC Endpoint?", "uri":"vpcep_04_0005.html", "doc_type":"usermanual", - "p_code":"51", - "code":"54" + "p_code":"52", + "code":"55" }, { "desc":"VPC endpoint services cannot be accessed across regions. VPC Endpoint supports only access to cloud services or users' private services in VPCs in the same region.", @@ -491,8 +500,8 @@ "title":"Does VPC Endpoint Support Cross-Region Access?", "uri":"vpcep_04_0006.html", "doc_type":"usermanual", - "p_code":"51", - "code":"55" + "p_code":"52", + "code":"56" }, { "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", @@ -501,7 +510,7 @@ "uri":"vpcep_0_0002.html", "doc_type":"usermanual", "p_code":"", - "code":"56" + "code":"57" }, { "desc":"For details about the terms involved in this document, see Glossary.", @@ -510,6 +519,6 @@ "uri":"vpcep_0_0003.html", "doc_type":"usermanual", "p_code":"", - "code":"57" + "code":"58" } ] \ No newline at end of file diff --git a/docs/vpcep/umn/en-us_image_0000001949612240.jpg b/docs/vpcep/umn/en-us_image_0000001949612240.jpg deleted file mode 100644 index b8048c33b..000000000 Binary files a/docs/vpcep/umn/en-us_image_0000001949612240.jpg and /dev/null differ diff --git a/docs/vpcep/umn/en-us_image_0000001949612440.png b/docs/vpcep/umn/en-us_image_0000001949612440.png deleted file mode 100644 index f99ec228c..000000000 Binary files a/docs/vpcep/umn/en-us_image_0000001949612440.png and /dev/null differ diff --git a/docs/vpcep/umn/en-us_image_0000001949673460.png b/docs/vpcep/umn/en-us_image_0000001949673460.png deleted file mode 100644 index ab675e841..000000000 Binary files a/docs/vpcep/umn/en-us_image_0000001949673460.png and /dev/null differ diff --git a/docs/vpcep/umn/en-us_image_0000001949701506.png b/docs/vpcep/umn/en-us_image_0000001949701506.png deleted file mode 100644 index 3b7507f53..000000000 Binary files a/docs/vpcep/umn/en-us_image_0000001949701506.png and /dev/null differ diff --git a/docs/vpcep/umn/en-us_image_0000001962828294.png b/docs/vpcep/umn/en-us_image_0000001962828294.png deleted file mode 100644 index 3d428b47b..000000000 Binary files a/docs/vpcep/umn/en-us_image_0000001962828294.png and /dev/null differ diff --git a/docs/vpcep/umn/en-us_image_0000001963030200.png b/docs/vpcep/umn/en-us_image_0000001963030200.png deleted file mode 100644 index f8761a3e2..000000000 Binary files a/docs/vpcep/umn/en-us_image_0000001963030200.png and /dev/null differ diff --git a/docs/vpcep/umn/en-us_image_0000001963151878.png b/docs/vpcep/umn/en-us_image_0000001963151878.png deleted file mode 100644 index cb9434370..000000000 Binary files a/docs/vpcep/umn/en-us_image_0000001963151878.png and /dev/null differ diff --git a/docs/vpcep/umn/en-us_image_0000001963155370.png b/docs/vpcep/umn/en-us_image_0000001963155370.png deleted file mode 100644 index 4b8bf9516..000000000 Binary files a/docs/vpcep/umn/en-us_image_0000001963155370.png and /dev/null differ diff --git a/docs/vpcep/umn/en-us_image_0000001963188988.png b/docs/vpcep/umn/en-us_image_0000001963188988.png deleted file mode 100644 index da9017c96..000000000 Binary files a/docs/vpcep/umn/en-us_image_0000001963188988.png and /dev/null differ diff --git a/docs/vpcep/umn/en-us_image_0000001964944912.png b/docs/vpcep/umn/en-us_image_0000001964944912.png deleted file mode 100644 index a12fc0da2..000000000 Binary files a/docs/vpcep/umn/en-us_image_0000001964944912.png and /dev/null differ diff --git a/docs/vpcep/umn/en-us_image_0000001979891805.png b/docs/vpcep/umn/en-us_image_0000001979891805.png deleted file mode 100644 index 4efaa1c1f..000000000 Binary files a/docs/vpcep/umn/en-us_image_0000001979891805.png and /dev/null differ diff --git a/docs/vpcep/umn/en-us_image_0000001979891821.png b/docs/vpcep/umn/en-us_image_0000001979891821.png deleted file mode 100644 index 14b914a4a..000000000 Binary files a/docs/vpcep/umn/en-us_image_0000001979891821.png and /dev/null differ diff --git a/docs/vpcep/umn/en-us_image_0000001979891897.png b/docs/vpcep/umn/en-us_image_0000001979891897.png deleted file mode 100644 index d949b2e8a..000000000 Binary files a/docs/vpcep/umn/en-us_image_0000001979891897.png and /dev/null differ diff --git a/docs/vpcep/umn/en-us_image_0000001979891909.png b/docs/vpcep/umn/en-us_image_0000001979891909.png deleted file mode 100644 index 659c5f998..000000000 Binary files a/docs/vpcep/umn/en-us_image_0000001979891909.png and /dev/null differ diff --git a/docs/vpcep/umn/en-us_image_0000001979891941.png b/docs/vpcep/umn/en-us_image_0000001979891941.png deleted file mode 100644 index 39779e941..000000000 Binary files a/docs/vpcep/umn/en-us_image_0000001979891941.png and /dev/null differ diff --git a/docs/vpcep/umn/en-us_image_0000001979891973.png b/docs/vpcep/umn/en-us_image_0000001979891973.png deleted file mode 100644 index 412d69a02..000000000 Binary files a/docs/vpcep/umn/en-us_image_0000001979891973.png and /dev/null differ diff --git a/docs/vpcep/umn/en-us_image_0000001980011629.png b/docs/vpcep/umn/en-us_image_0000001980011629.png deleted file mode 100644 index fe39ed763..000000000 Binary files a/docs/vpcep/umn/en-us_image_0000001980011629.png and /dev/null differ diff --git a/docs/vpcep/umn/en-us_image_0000001980011661.png b/docs/vpcep/umn/en-us_image_0000001980011661.png deleted file mode 100644 index ed80d7371..000000000 Binary files a/docs/vpcep/umn/en-us_image_0000001980011661.png and /dev/null differ diff --git a/docs/vpcep/umn/en-us_image_0000001980011797.png b/docs/vpcep/umn/en-us_image_0000001980011797.png deleted file mode 100644 index cc7816e44..000000000 Binary files a/docs/vpcep/umn/en-us_image_0000001980011797.png and /dev/null differ diff --git a/docs/vpcep/umn/en-us_image_0000001980011825.png b/docs/vpcep/umn/en-us_image_0000001980011825.png deleted file mode 100644 index 78df03a6e..000000000 Binary files a/docs/vpcep/umn/en-us_image_0000001980011825.png and /dev/null differ diff --git a/docs/vpcep/umn/en-us_image_0000001980011849.png b/docs/vpcep/umn/en-us_image_0000001980011849.png deleted file mode 100644 index 5edff8d0e..000000000 Binary files a/docs/vpcep/umn/en-us_image_0000001980011849.png and /dev/null differ diff --git a/docs/vpcep/umn/en-us_image_0000001980053681.png b/docs/vpcep/umn/en-us_image_0000001980053681.png deleted file mode 100644 index 4c221c9e7..000000000 Binary files a/docs/vpcep/umn/en-us_image_0000001980053681.png and /dev/null differ diff --git a/docs/vpcep/umn/en-us_image_0000001980064445.png b/docs/vpcep/umn/en-us_image_0000001980064445.png deleted file mode 100644 index bad777e24..000000000 Binary files a/docs/vpcep/umn/en-us_image_0000001980064445.png and /dev/null differ diff --git a/docs/vpcep/umn/en-us_image_0000001980082033.png b/docs/vpcep/umn/en-us_image_0000001980082033.png deleted file mode 100644 index fb85969dd..000000000 Binary files a/docs/vpcep/umn/en-us_image_0000001980082033.png and /dev/null differ diff --git a/docs/vpcep/umn/en-us_image_0000001999128697.png b/docs/vpcep/umn/en-us_image_0000001999128697.png deleted file mode 100644 index a7b4906a5..000000000 Binary files a/docs/vpcep/umn/en-us_image_0000001999128697.png and /dev/null differ diff --git a/docs/vpcep/umn/en-us_image_0000001999152565.png b/docs/vpcep/umn/en-us_image_0000001999152565.png deleted file mode 100644 index d378c1136..000000000 Binary files a/docs/vpcep/umn/en-us_image_0000001999152565.png and /dev/null differ diff --git a/docs/vpcep/umn/en-us_image_0000002148325420.png b/docs/vpcep/umn/en-us_image_0000002148325420.png new file mode 100644 index 000000000..db5712d6a Binary files /dev/null and b/docs/vpcep/umn/en-us_image_0000002148325420.png differ diff --git a/docs/vpcep/umn/en-us_image_0000002148468896.png b/docs/vpcep/umn/en-us_image_0000002148468896.png new file mode 100644 index 000000000..8e71481c9 Binary files /dev/null and b/docs/vpcep/umn/en-us_image_0000002148468896.png differ diff --git a/docs/vpcep/umn/en-us_image_0000002148474476.png b/docs/vpcep/umn/en-us_image_0000002148474476.png new file mode 100644 index 000000000..8c6ca5b00 Binary files /dev/null and b/docs/vpcep/umn/en-us_image_0000002148474476.png differ diff --git a/docs/vpcep/umn/en-us_image_0000002148477032.png b/docs/vpcep/umn/en-us_image_0000002148477032.png new file mode 100644 index 000000000..2670abab0 Binary files /dev/null and b/docs/vpcep/umn/en-us_image_0000002148477032.png differ diff --git a/docs/vpcep/umn/en-us_image_0000002149218350.png b/docs/vpcep/umn/en-us_image_0000002149218350.png new file mode 100644 index 000000000..3b5f8c6b1 Binary files /dev/null and b/docs/vpcep/umn/en-us_image_0000002149218350.png differ diff --git a/docs/vpcep/umn/en-us_image_0000002149315270.png b/docs/vpcep/umn/en-us_image_0000002149315270.png new file mode 100644 index 000000000..706332c2d Binary files /dev/null and b/docs/vpcep/umn/en-us_image_0000002149315270.png differ diff --git a/docs/vpcep/umn/en-us_image_0000002149328946.png b/docs/vpcep/umn/en-us_image_0000002149328946.png new file mode 100644 index 000000000..adaf97ced Binary files /dev/null and b/docs/vpcep/umn/en-us_image_0000002149328946.png differ diff --git a/docs/vpcep/umn/en-us_image_0000002149376822.png b/docs/vpcep/umn/en-us_image_0000002149376822.png new file mode 100644 index 000000000..7630cb145 Binary files /dev/null and b/docs/vpcep/umn/en-us_image_0000002149376822.png differ diff --git a/docs/vpcep/umn/en-us_image_0000002149398074.png b/docs/vpcep/umn/en-us_image_0000002149398074.png new file mode 100644 index 000000000..c65e79ecb Binary files /dev/null and b/docs/vpcep/umn/en-us_image_0000002149398074.png differ diff --git a/docs/vpcep/umn/en-us_image_0000002149399690.png b/docs/vpcep/umn/en-us_image_0000002149399690.png new file mode 100644 index 000000000..e1de5e5b9 Binary files /dev/null and b/docs/vpcep/umn/en-us_image_0000002149399690.png differ diff --git a/docs/vpcep/umn/en-us_image_0000002149488390.png b/docs/vpcep/umn/en-us_image_0000002149488390.png new file mode 100644 index 000000000..54f10f73e Binary files /dev/null and b/docs/vpcep/umn/en-us_image_0000002149488390.png differ diff --git a/docs/vpcep/umn/en-us_image_0000002149659408.png b/docs/vpcep/umn/en-us_image_0000002149659408.png new file mode 100644 index 000000000..c9ed09be4 Binary files /dev/null and b/docs/vpcep/umn/en-us_image_0000002149659408.png differ diff --git a/docs/vpcep/umn/en-us_image_0000002149740152.png b/docs/vpcep/umn/en-us_image_0000002149740152.png new file mode 100644 index 000000000..c01367036 Binary files /dev/null and b/docs/vpcep/umn/en-us_image_0000002149740152.png differ diff --git a/docs/vpcep/umn/en-us_image_0000002183560857.png b/docs/vpcep/umn/en-us_image_0000002183560857.png new file mode 100644 index 000000000..8721e1f55 Binary files /dev/null and b/docs/vpcep/umn/en-us_image_0000002183560857.png differ diff --git a/docs/vpcep/umn/en-us_image_0000002183621541.png b/docs/vpcep/umn/en-us_image_0000002183621541.png new file mode 100644 index 000000000..7dec552ff Binary files /dev/null and b/docs/vpcep/umn/en-us_image_0000002183621541.png differ diff --git a/docs/vpcep/umn/en-us_image_0000002183680605.png b/docs/vpcep/umn/en-us_image_0000002183680605.png new file mode 100644 index 000000000..7730bab39 Binary files /dev/null and b/docs/vpcep/umn/en-us_image_0000002183680605.png differ diff --git a/docs/vpcep/umn/en-us_image_0000002183863757.png b/docs/vpcep/umn/en-us_image_0000002183863757.png new file mode 100644 index 000000000..0bded11a1 Binary files /dev/null and b/docs/vpcep/umn/en-us_image_0000002183863757.png differ diff --git a/docs/vpcep/umn/en-us_image_0000002183865529.png b/docs/vpcep/umn/en-us_image_0000002183865529.png new file mode 100644 index 000000000..d2954b4da Binary files /dev/null and b/docs/vpcep/umn/en-us_image_0000002183865529.png differ diff --git a/docs/vpcep/umn/en-us_image_0000002184446549.png b/docs/vpcep/umn/en-us_image_0000002184446549.png new file mode 100644 index 000000000..219577668 Binary files /dev/null and b/docs/vpcep/umn/en-us_image_0000002184446549.png differ diff --git a/docs/vpcep/umn/en-us_image_0000002184469493.png b/docs/vpcep/umn/en-us_image_0000002184469493.png new file mode 100644 index 000000000..d74e31001 Binary files /dev/null and b/docs/vpcep/umn/en-us_image_0000002184469493.png differ diff --git a/docs/vpcep/umn/en-us_image_0000002184495069.png b/docs/vpcep/umn/en-us_image_0000002184495069.png new file mode 100644 index 000000000..b289a957b Binary files /dev/null and b/docs/vpcep/umn/en-us_image_0000002184495069.png differ diff --git a/docs/vpcep/umn/en-us_image_0000002184506357.png b/docs/vpcep/umn/en-us_image_0000002184506357.png new file mode 100644 index 000000000..f7b25e8bb Binary files /dev/null and b/docs/vpcep/umn/en-us_image_0000002184506357.png differ diff --git a/docs/vpcep/umn/en-us_image_0000002184555045.png b/docs/vpcep/umn/en-us_image_0000002184555045.png new file mode 100644 index 000000000..cece5b05c Binary files /dev/null and b/docs/vpcep/umn/en-us_image_0000002184555045.png differ diff --git a/docs/vpcep/umn/en-us_image_0000002184558693.png b/docs/vpcep/umn/en-us_image_0000002184558693.png new file mode 100644 index 000000000..f385df2ef Binary files /dev/null and b/docs/vpcep/umn/en-us_image_0000002184558693.png differ diff --git a/docs/vpcep/umn/en-us_image_0000002184637917.png b/docs/vpcep/umn/en-us_image_0000002184637917.png new file mode 100644 index 000000000..b9baea9a7 Binary files /dev/null and b/docs/vpcep/umn/en-us_image_0000002184637917.png differ diff --git a/docs/vpcep/umn/en-us_image_0000002184649877.png b/docs/vpcep/umn/en-us_image_0000002184649877.png new file mode 100644 index 000000000..00aa75938 Binary files /dev/null and b/docs/vpcep/umn/en-us_image_0000002184649877.png differ diff --git a/docs/vpcep/umn/en-us_image_0000002184964665.png b/docs/vpcep/umn/en-us_image_0000002184964665.png new file mode 100644 index 000000000..c9ed09be4 Binary files /dev/null and b/docs/vpcep/umn/en-us_image_0000002184964665.png differ diff --git a/docs/vpcep/umn/en-us_image_0000002185000233.png b/docs/vpcep/umn/en-us_image_0000002185000233.png new file mode 100644 index 000000000..32be9a4bf Binary files /dev/null and b/docs/vpcep/umn/en-us_image_0000002185000233.png differ diff --git a/docs/vpcep/umn/en-us_image_0000002185004557.png b/docs/vpcep/umn/en-us_image_0000002185004557.png new file mode 100644 index 000000000..a32604d56 Binary files /dev/null and b/docs/vpcep/umn/en-us_image_0000002185004557.png differ diff --git a/docs/vpcep/umn/en-us_image_0000002185096105.png b/docs/vpcep/umn/en-us_image_0000002185096105.png new file mode 100644 index 000000000..4c45a0159 Binary files /dev/null and b/docs/vpcep/umn/en-us_image_0000002185096105.png differ diff --git a/docs/vpcep/umn/en-us_image_0000002185218293.png b/docs/vpcep/umn/en-us_image_0000002185218293.png new file mode 100644 index 000000000..c924ed08d Binary files /dev/null and b/docs/vpcep/umn/en-us_image_0000002185218293.png differ diff --git a/docs/vpcep/umn/en-us_topic_0131645182.html b/docs/vpcep/umn/en-us_topic_0131645182.html index 5a838b691..933292ba2 100644 --- a/docs/vpcep/umn/en-us_topic_0131645182.html +++ b/docs/vpcep/umn/en-us_topic_0131645182.html @@ -11,7 +11,7 @@

Prerequisites

There is a load balancer in the VPC where you are going to create the VPC endpoint service.

-

Procedure

  1. Log in to the management console.
  2. Click in the upper left corner and select the required region and project.
  3. Click Service List and choose Networking > VPC Endpoint.
  4. In the navigation pane on the left, choose VPC Endpoint > VPC Endpoint Services. In the upper right corner, click Create VPC Endpoint Service.
    The Create VPC Endpoint Service page is displayed.
    Figure 1 Create VPC Endpoint Service
    +

    Procedure

    1. Log in to the management console.
    2. Click in the upper left corner and select the required region and project.
    3. Click Service List and choose Networking > VPC Endpoint.
    4. In the navigation pane on the left, choose VPC Endpoint > VPC Endpoint Services. In the upper right corner, click Create VPC Endpoint Service.
      The Create VPC Endpoint Service page is displayed.
      Figure 1 Create VPC Endpoint Service
    5. Configure parameters by referring to Table 1.
      @@ -80,12 +80,12 @@ - - @@ -100,6 +100,11 @@ + + +
      Table 1 Parameters for creating a VPC endpoint service

      Parameter

      @@ -66,7 +66,7 @@

      Specifies the backend resource that provides services to be accessed.

      The following backend resource types are supported:

      • Elastic load balancer: Backend resources of this type suit services that receive high access traffic and demand high reliability and disaster recovery (DR) performance.
      • ECS: Backend resources of this type serve as servers.
      • BMS: Backend resources of this type serve as servers. BMS will be discarded. You are recommended to choose Elastic load balancer.
      -
      In this example, select Elastic load balancer.
      NOTE:

      For the security group associated with the backend resource configured for the VPC endpoint service, add an inbound rule, with Source set to 198.19.128.0/17. For details, see Adding a Security Group Rule in the Virtual Private Cloud User Guide.

      +
      In this example, select Elastic load balancer.
      NOTE:

      For the security group associated with the backend resource configured for the VPC endpoint service, add an inbound rule, with Source set to 198.19.128.0/17. For details, see Adding a Security Group Rule in the Virtual Private Cloud User Guide.

      ECS List

      When you select ECS for Backend Resource Type, select an ECS from the ECS list.

      +

      This parameter is available when you select ECS for Backend Resource Type. Select an ECS from the ECS list.

      BMS List

      When you select BMS for Backend Resource Type, select a BMS from the BMS list.

      +

      This parameter is available when you select BMS for Backend Resource Type. Select a BMS from the BMS list.

      NOTE:

      The BMS type will be discarded. The ELB type is recommended.

      Description

      +

      Provides supplementary information about the VPC endpoint service.

      +
      @@ -123,7 +128,7 @@
    -
  5. Click Create Now.
  6. Click Back to VPC Endpoint Service List to view the newly-created VPC endpoint service.
    Figure 2 VPC endpoint service list
    +
  7. Click Create Now.
  8. Click Back to VPC Endpoint Service List to view the newly-created VPC endpoint service.
    Figure 2 VPC endpoint service list
diff --git a/docs/vpcep/umn/en-us_topic_0131645189.html b/docs/vpcep/umn/en-us_topic_0131645189.html index 62ab9f021..09d0a2782 100644 --- a/docs/vpcep/umn/en-us_topic_0131645189.html +++ b/docs/vpcep/umn/en-us_topic_0131645189.html @@ -8,8 +8,8 @@

You can create an interface or a gateway VPC endpoint based the type of the associated VPC endpoint service.

-

Creating a VPC Endpoint for Accessing Interface VPC Endpoint Services

  1. Log in to the management console.
  2. Click in the upper left corner and select the required region and project.
  3. Click Service List and choose Networking > VPC Endpoint.
  4. On the VPC Endpoints page, click Create VPC Endpoint.
  5. On the Create VPC Endpoint page, configure the parameters.
    Figure 1 Create VPC Endpoint (Service Category set to Cloud service)
    -
    Figure 2 Create VPC Endpoint (Service Category set to Find a service by name)
    +

    Creating a VPC Endpoint for Accessing Interface VPC Endpoint Services

    1. Log in to the management console.
    2. Click in the upper left corner and select the required region and project.
    3. Click Service List and choose Networking > VPC Endpoint.
    4. On the VPC Endpoints page, click Create VPC Endpoint.
    5. On the Create VPC Endpoint page, configure the parameters.
      Figure 1 Create VPC Endpoint (Service Category set to Cloud service)
      +
      Figure 2 Create VPC Endpoint (Service Category set to Find a service by name)
      @@ -59,10 +59,24 @@

      Specifies the subnet where the VPC endpoint is to be deployed.

      - - + + + + + + + + +
      Table 1 VPC endpoint parameters

      Parameter

      Private IP Address

      +

      IPv4 Address

      This parameter is available when you want to access an interface VPC endpoint service.

      -

      Specifies the private IP address of the VPC endpoint. You can select Automatically assign or Manually specify.

      +

      This parameter is available when you want to access an interface VPC endpoint service.

      +

      Specifies the IPv4 address of the VPC endpoint.

      +

      You can select Automatically assign or Manually specify.

      +

      Access Control

      +

      This parameter is available when you want to access an interface VPC endpoint service.

      +

      It controls IP addresses and CIDR blocks that are allowed to access the VPC endpoint.

      +
      • If Access Control is enabled, only IP addresses or CIDR blocks in the whitelist are allowed to access the VPC endpoint.
      • If Access Control is disabled, any IP address or CIDR block can access the VPC endpoint.
      +

      Whitelist

      +

      This parameter is available when you want to access an interface endpoint service and Access Control is enabled.

      +

      Lists the IP addresses or CIDR blocks that are allowed to access the VPC endpoint. You can add a maximum of 20 records.

      Tag

      @@ -75,6 +89,11 @@

      Description

      +

      Provides supplementary information about the VPC endpoint.

      +
      @@ -99,15 +118,15 @@
    -
  6. Confirm the specifications and click Create Now.
    • If all of the specifications are correct, click Submit.
    • If any of the specifications are incorrect, click Previous to return to the previous page and modify the parameters as needed, and click Submit.
    +
  7. Confirm the specifications and click Create Now.
    • If all of the specifications are correct, click Submit.
    • If any of the specifications are incorrect, click Previous to return to the previous page, modify the parameters as needed, and click Submit.
-

Creating a VPC Endpoint for Accessing Gateway VPC Endpoint Services

  1. Log in to the management console.
  2. Click in the upper left corner and select the required region and project.
  3. Click Service List and choose Networking > VPC Endpoint.
  4. On the VPC Endpoints page, click Create VPC Endpoint.
  5. On the Create VPC Endpoint page, configure the parameters.
    Figure 3 Create VPC Endpoint (Service Category set to Cloud service)
    -
    Figure 4 Create VPC Endpoint (Service Category set to Find a service by name)
    +

    Creating a VPC Endpoint for Accessing Gateway VPC Endpoint Services

    1. Log in to the management console.
    2. Click in the upper left corner and select the required region and project.
    3. Click Service List and choose Networking > VPC Endpoint.
    4. On the VPC Endpoints page, click Create VPC Endpoint.
    5. On the Create VPC Endpoint page, configure the parameters.
      Figure 3 Create VPC Endpoint (Service Category set to Cloud service)
      +
      Figure 4 Create VPC Endpoint (Service Category set to Find a service by name)
      -
      Table 3 VPC endpoint parameters

      Parameter

      +
      - @@ -124,7 +143,7 @@ - @@ -141,11 +160,6 @@ - - - + + +
      Table 3 VPC endpoint parameters

      Parameter

      Description

      +

      Description

      Service List

      This parameter is available only when you select Cloud service for Service Category.

      +

      This parameter is available only when you select Cloud service for Service Category.

      In the VPC endpoint service list, select the VPC endpoint service whose type is gateway.

      The VPC endpoint service has been created by the O&M personnel and you can directly use it.

      Specifies the VPC where the VPC endpoint is to be deployed.

      Subnet

      -

      Specifies the subnet where the VPC endpoint is to be deployed.

      -

      Route Table

      This parameter is available only when you create a VPC endpoint for connecting to a gateway VPC endpoint service.

      @@ -162,13 +176,18 @@

      Description

      +

      Provides supplementary information about the VPC endpoint.

      +
      -
      Table 4 Tag requirements for VPC endpoints

      Parameter

      +
      - @@ -186,7 +205,7 @@
      Table 4 Tag requirements for VPC endpoints

      Parameter

      Requirement

      +

      Requirement
      -
    6. Confirm the specifications and click Create Now.
      • If all of the specifications are correct, click Submit.
      • If any of the specifications are incorrect, click Previous to return to the previous page and modify the parameters as needed, and click Submit.
      +
    7. Confirm the specifications and click Create Now.
      • If all of the specifications are correct, click Submit.
      • If any of the specifications are incorrect, click Previous to return to the previous page, modify the parameters as needed, and click Submit.
      8. diff --git a/docs/vpcep/umn/vpcep_01_0011.html b/docs/vpcep/umn/vpcep_01_0011.html index 7eb2b8db7..a947143f1 100644 --- a/docs/vpcep/umn/vpcep_01_0011.html +++ b/docs/vpcep/umn/vpcep_01_0011.html @@ -11,7 +11,7 @@

      Selecting an AZ

      When deploying resources, consider your applications' requirements on disaster recovery (DR) and network latency.

      • For high DR capability, deploy resources in different AZs within the same region.
      • For lower network latency, deploy resources in the same AZ.
      -

      Regions and Endpoints

      Before you use an API to call resources, specify its region and endpoint. For more details, see Regions and Endpoints.

      +

      Regions and Endpoints

      Before you use an API to call resources, specify its region and endpoint. For more details, see Regions and Endpoints.

      diff --git a/docs/vpcep/umn/vpcep_02_02022.html b/docs/vpcep/umn/vpcep_02_02022.html index adbe3a623..c803f21ad 100644 --- a/docs/vpcep/umn/vpcep_02_02022.html +++ b/docs/vpcep/umn/vpcep_02_02022.html @@ -7,7 +7,7 @@

      Prerequisites

      There is a load balancer in the VPC where you are going to create the VPC endpoint service.

      Procedure

      1. Log in to the management console.
      2. Click in the upper left corner and select the required region and project.
      3. Click Service List and choose Networking > VPC Endpoint.
      1. In the navigation pane on the left, choose VPC Endpoint > VPC Endpoint Services. In the upper right corner, click Create VPC Endpoint Service.

        The Create VPC Endpoint Service page is displayed.

        -
        Figure 1 Create VPC Endpoint Service
        +
        Figure 1 Create VPC Endpoint Service
      2. Configure required parameters.
        @@ -61,7 +61,7 @@ @@ -83,6 +83,11 @@ + + +
        Table 1 Parameters for creating a VPC endpoint service

        Parameter

        Specifies the backend resource that provides services to be accessed.

        The following backend resource types are supported:

        • Elastic load balancer: Backend resources of this type suit services that receive high access traffic and demand high reliability and disaster recovery (DR) performance.
        • ECS: Backend resources of this type serve as servers.
        • BMS: Backend resources of this type serve as servers. BMS will be discarded. You are recommended to choose Elastic load balancer.
        -
        In this example, select Elastic load balancer.
        NOTE:

        For the security group associated with the backend resource configured for the VPC endpoint service, add an inbound rule, with Source set to 198.19.128.0/17. For details, see Adding a Security Group Rule in the Virtual Private Cloud User Guide.

        +
        In this example, select Elastic load balancer.
        NOTE:

        For the security group associated with the backend resource configured for the VPC endpoint service, add an inbound rule, with Source set to 198.19.128.0/17. For details, see Adding a Security Group Rule in the Virtual Private Cloud User Guide.

        Description

        +

        Provides supplementary information about the VPC endpoint service.

        +
        @@ -106,7 +111,7 @@
      -
    8. Click Create Now.
    9. Click Back to VPC Endpoint Service List to view the newly-created VPC endpoint service.
    10. In the VPC endpoint service list, locate the VPC endpoint service and click its name to view its details.
      Figure 2 Summary of the VPC endpoint service
      +
    11. Click Create Now.
    12. Click Back to VPC Endpoint Service List to view the newly-created VPC endpoint service.
    13. In the VPC endpoint service list, locate the VPC endpoint service and click its name to view its details.
      Figure 2 Summary of the VPC endpoint service

      14. diff --git a/docs/vpcep/umn/vpcep_02_02023.html b/docs/vpcep/umn/vpcep_02_02023.html index 1b928e7b7..fb2c14ffc 100644 --- a/docs/vpcep/umn/vpcep_02_02023.html +++ b/docs/vpcep/umn/vpcep_02_02023.html @@ -6,7 +6,7 @@

      Select the same region and project as those of the VPC endpoint service.

      -

      Procedure

      1. Log in to the management console.
      2. Click in the upper left corner and select the required region and project.
      3. Click Service List and choose Networking > VPC Endpoint.
      4. On the VPC Endpoints page, click Create VPC Endpoint.
        The Create VPC Endpoint page is displayed.
        Figure 1 Create VPC Endpoint (Service Category set to Find a service by name)
        +

        Procedure

        1. Log in to the management console.
        2. Click in the upper left corner and select the required region and project.
        3. Click Service List and choose Networking > VPC Endpoint.
        4. On the VPC Endpoints page, click Create VPC Endpoint.
          The Create VPC Endpoint page is displayed.
          Figure 1 Create VPC Endpoint (Service Category set to Find a service by name)
        5. Configure VPC endpoint parameters.
          - - - + + + + + + + + +
          Table 1 VPC endpoint parameters

          Parameter

          @@ -48,7 +48,8 @@

          Subnet

          Specifies the subnet where the VPC endpoint is to be deployed.

          +

          This parameter is available when you want to access an interface VPC endpoint service.

          +

          Specifies the subnet where the VPC endpoint is to be deployed.

          Route Table

          @@ -57,10 +58,24 @@

          Select a route table for the VPC where the VPC endpoint is to be deployed.

          Private IP Address

          +

          IPv4 Address

          This parameter is available only when you create a VPC endpoint for connecting to an interface VPC endpoint service.

          -

          Specifies the private IP address of the VPC endpoint. You can select Automatically assign or Manually specify.

          +

          This parameter is available only when you create a VPC endpoint for connecting to an interface VPC endpoint service.

          +

          Specifies the IPv4 address of the VPC endpoint.

          +

          You can select Automatically assign or Manually specify.

          +

          Access Control

          +

          This parameter is available only when you create a VPC endpoint for connecting to an interface VPC endpoint service.

          +

          It controls IP addresses and CIDR blocks that are allowed to access the VPC endpoint.

          +
          • If Access Control is enabled, only IP addresses or CIDR blocks in the whitelist are allowed to access the VPC endpoint.
          • If Access Control is disabled, any IP address or CIDR block can access the VPC endpoint.
          +

          Whitelist

          +

          This parameter is available only when you create a VPC endpoint for connecting to an interface VPC endpoint service and enable access control.

          +

          Lists the IP addresses or CIDR blocks that are allowed to access the VPC endpoint. You can add a maximum of 20 records.

          Tag

          @@ -73,6 +88,11 @@

          Description

          +

          Provides supplementary information about the VPC endpoint.

          +
          @@ -96,11 +116,11 @@
      -
    14. Confirm the specifications and click Create Now.
      • If all of the specifications are correct, click Submit.
      • If any of the specifications are incorrect, click Previous to return to the previous page and modify the parameters as needed, and click Submit.
      +
    15. Confirm the specifications and click Create Now.
      • If all of the specifications are correct, click Submit.
      • If any of the specifications are incorrect, click Previous to return to the previous page, modify the parameters as needed, and click Submit.
    16. Manage the connection of the VPC endpoint.
      If the status of the VPC endpoint changes to Accepted, the VPC endpoint is connected to the required VPC endpoint service. If the status is Pending acceptance, connection approval is enabled for the VPC endpoint service, ask the owner of the VPC endpoint service to perform the following operations:
      1. In the navigation pane on the left, choose VPC Endpoint > VPC Endpoint Services.
      2. Locate the VPC endpoint service and click its name.
      3. On the displayed page, select the Connection Management tab.
        • If you allow a VPC endpoint to connect to this VPC endpoint service, locate the VPC endpoint and click Accept in the Operation column.
        • If you do not allow a VPC endpoint to connect to this VPC endpoint service, click Reject in the Operation column.
      4. Go back to the VPC endpoint list and check whether the status of the VPC endpoint changes to Accepted. If yes, the VPC endpoint is connected to the VPC endpoint service.
      -
    17. In the VPC endpoint list, click the ID of the VPC endpoint to view its details.
      After a VPC endpoint is created, a private IP address is assigned together with a private domain name if you select Create a Private Domain Name during creation.
      Figure 2 Summary of the VPC endpoint (for accessing an interface VPC endpoint service)
      +
    18. In the VPC endpoint list, click the ID of the VPC endpoint to view its details.
      After a VPC endpoint is created, a private IP address is assigned together with a private domain name if you select Create a Private Domain Name during creation.
      Figure 2 Summary of the VPC endpoint (for accessing an interface VPC endpoint service)

      You can use the private IP address or private domain name to access the VPC endpoint service.

    diff --git a/docs/vpcep/umn/vpcep_02_02032.html b/docs/vpcep/umn/vpcep_02_02032.html index cf7bf439f..4346631b3 100644 --- a/docs/vpcep/umn/vpcep_02_02032.html +++ b/docs/vpcep/umn/vpcep_02_02032.html @@ -7,7 +7,7 @@

    Prerequisites

    There is a load balancer in the VPC where you are going to create the VPC endpoint service.

    Procedure

    1. Log in to the management console.
    2. Click in the upper left corner and select the required region and project.
    3. Click Service List and choose Networking > VPC Endpoint.
    1. In the navigation pane on the left, choose VPC Endpoint > VPC Endpoint Services. In the upper right corner, click Create VPC Endpoint Service.

      The Create VPC Endpoint Service page is displayed.

      -
      Figure 1 Create VPC Endpoint Service
      +
      Figure 1 Create VPC Endpoint Service
    2. Configure required parameters.
      @@ -61,7 +61,7 @@ @@ -83,6 +83,11 @@ + + +
      Table 1 Parameters for creating a VPC endpoint service

      Parameter

      Specifies the backend resource that provides services to be accessed.

      The following backend resource types are supported:

      • Elastic load balancer: Backend resources of this type suit services that receive high access traffic and demand high reliability and disaster recovery (DR) performance.
      • ECS: Backend resources of this type serve as servers.
      • BMS: Backend resources of this type serve as servers. BMS will be discarded. You are recommended to choose Elastic load balancer.
      -
      In this example, select Elastic load balancer.
      NOTE:

      For the security group associated with the backend resource configured for the VPC endpoint service, add an inbound rule, with Source set to 198.19.128.0/17. For details, see Adding a Security Group Rule in the Virtual Private Cloud User Guide.

      +
      In this example, select Elastic load balancer.
      NOTE:

      For the security group associated with the backend resource configured for the VPC endpoint service, add an inbound rule, with Source set to 198.19.128.0/17. For details, see Adding a Security Group Rule in the Virtual Private Cloud User Guide.

      Description

      +

      Provides supplementary information about the VPC endpoint service.

      +
      @@ -106,7 +111,7 @@
    -
  6. Click Create Now.
  7. Click Back to VPC Endpoint Service List to view the newly-created VPC endpoint service.
  8. In the VPC endpoint service list, locate the VPC endpoint service and click its name to view its details.
    Figure 2 Summary of the VPC endpoint service
    +
  9. Click Create Now.
  10. Click Back to VPC Endpoint Service List to view the newly-created VPC endpoint service.
  11. In the VPC endpoint service list, locate the VPC endpoint service and click its name to view its details.
    Figure 2 Summary of the VPC endpoint service

diff --git a/docs/vpcep/umn/vpcep_02_02034.html b/docs/vpcep/umn/vpcep_02_02034.html index 6de4af0a3..29f2c0086 100644 --- a/docs/vpcep/umn/vpcep_02_02034.html +++ b/docs/vpcep/umn/vpcep_02_02034.html @@ -13,7 +13,7 @@ -

Add Account IDs to Be Authorized to the Whitelist of a VPC Endpoint Service

  1. Click in the upper left corner and select the required region and project.
  1. Click Service List and choose Networking > VPC Endpoint.
  1. In the navigation pane on the left, choose VPC Endpoint > VPC Endpoint Services.
  2. In the VPC endpoint service list, locate the VPC endpoint service and click its name.
  3. On the displayed page, select the Permission Management tab and click Add to Whitelist.
  4. Enter an authorized account ID in the required format and click OK.
    Figure 3 Add to Whitelist
    +

    Add Account IDs to Be Authorized to the Whitelist of a VPC Endpoint Service

    1. Click in the upper left corner and select the required region and project.
    1. Click Service List and choose Networking > VPC Endpoint.
    1. In the navigation pane on the left, choose VPC Endpoint > VPC Endpoint Services.
    2. In the VPC endpoint service list, locate the VPC endpoint service and click its name.
    3. On the displayed page, select the Permission Management tab and click Add to Whitelist.
    4. Enter an authorized account ID in the required format and click OK.
      Figure 3 Add to Whitelist
      • Your account is in the whitelist of your VPC endpoint service by default.
      • The authorized account ID is in the iam:domain::domain_id format.

        domain_id indicates the ID of the authorized account, for example, iam:domain::1564ec50ef2a47c791ea5536353ed4b9

      • Adding * to the whitelist means that all users can access the VPC endpoint service.
      diff --git a/docs/vpcep/umn/vpcep_02_02035.html b/docs/vpcep/umn/vpcep_02_02035.html index 70b8cb19c..08371e3bb 100644 --- a/docs/vpcep/umn/vpcep_02_02035.html +++ b/docs/vpcep/umn/vpcep_02_02035.html @@ -5,7 +5,7 @@

      Select the same region and project as those of the VPC endpoint service.

    -

    Procedure

    1. Log in to the management console.
    2. Click in the upper left corner and select the required region and project.
    3. Click Service List and choose Networking > VPC Endpoint.
    4. On the VPC Endpoints page, click Create VPC Endpoint.
      The Create VPC Endpoint page is displayed.
      Figure 1 Create VPC Endpoint (Service Category set to Find a service by name)
      +

      Procedure

      1. Log in to the management console.
      2. Click in the upper left corner and select the required region and project.
      3. Click Service List and choose Networking > VPC Endpoint.
      4. On the VPC Endpoints page, click Create VPC Endpoint.
        The Create VPC Endpoint page is displayed.
        Figure 1 Create VPC Endpoint (Service Category set to Find a service by name)
      5. Configure VPC endpoint parameters.
        - - - + + + + + + + + +
        Table 1 VPC endpoint parameters

        Parameter

        @@ -47,7 +47,8 @@

        Subnet

        Specifies the subnet where the VPC endpoint is to be deployed.

        +

        This parameter is available when you want to access an interface VPC endpoint service.

        +

        Specifies the subnet where the VPC endpoint is to be deployed.

        Route Table

        @@ -56,10 +57,24 @@

        Select a route table for the VPC where the VPC endpoint is to be deployed.

        Private IP Address

        +

        IPv4 Address

        This parameter is available only when you create a VPC endpoint for connecting to an interface VPC endpoint service.

        -

        Specifies the private IP address of the VPC endpoint. You can select Automatically assign or Manually specify.

        +

        This parameter is available only when you create a VPC endpoint for connecting to an interface VPC endpoint service.

        +

        Specifies the IPv4 address of the VPC endpoint.

        +

        You can select Automatically assign or Manually specify.

        +

        Access Control

        +

        This parameter is available only when you create a VPC endpoint for connecting to an interface VPC endpoint service.

        +

        It controls IP addresses and CIDR blocks that are allowed to access the VPC endpoint.

        +
        • If Access Control is enabled, only IP addresses or CIDR blocks in the whitelist are allowed to access the VPC endpoint.
        • If Access Control is disabled, any IP address or CIDR block can access the VPC endpoint.
        +

        Whitelist

        +

        This parameter is available only when you create a VPC endpoint for connecting to an interface VPC endpoint service and enable access control.

        +

        Lists the IP addresses or CIDR blocks that are allowed to access the VPC endpoint. You can add a maximum of 20 records.

        Tag

        @@ -72,6 +87,11 @@

        Description

        +

        Provides supplementary information about the VPC endpoint.

        +
        @@ -95,11 +115,11 @@
      -
    5. Confirm the specifications and click Create Now.
      • If all of the specifications are correct, click Submit.
      • If any of the specifications are incorrect, click Previous to return to the previous page and modify the parameters as needed, and click Submit.
      +
    6. Confirm the specifications and click Create Now.
      • If all of the specifications are correct, click Submit.
      • If any of the specifications are incorrect, click Previous to return to the previous page, modify the parameters as needed, and click Submit.
    7. Manage the connection of the VPC endpoint.
      If the status of the VPC endpoint changes to Accepted, the VPC endpoint is connected to the required VPC endpoint service. If the status is Pending acceptance, connection approval is enabled for the VPC endpoint service, ask the owner of the VPC endpoint service to perform the following operations:
      1. In the navigation pane on the left, choose VPC Endpoint > VPC Endpoint Services.
      2. Locate the VPC endpoint service and click its name.
      3. On the displayed page, select the Connection Management tab.
        • If you allow a VPC endpoint to connect to this VPC endpoint service, locate the VPC endpoint and click Accept in the Operation column.
        • If you do not allow a VPC endpoint to connect to this VPC endpoint service, click Reject in the Operation column.
      4. Go back to the VPC endpoint list and check whether the status of the VPC endpoint changes to Accepted. If yes, the VPC endpoint is connected to the VPC endpoint service.
      -
    8. In the VPC endpoint list, click the ID of the VPC endpoint to view its details.
      After a VPC endpoint is created, a private IP address is assigned together with a private domain name if you select Create a Private Domain Name during creation.
      Figure 2 Summary of the VPC endpoint (for accessing an interface VPC endpoint service)
      +
    9. In the VPC endpoint list, click the ID of the VPC endpoint to view its details.
      After a VPC endpoint is created, a private IP address is assigned together with a private domain name if you select Create a Private Domain Name during creation.
      Figure 2 Summary of the VPC endpoint (for accessing an interface VPC endpoint service)

      You can use the private IP address or private domain name to access the VPC endpoint service.

    diff --git a/docs/vpcep/umn/vpcep_02_0302.html b/docs/vpcep/umn/vpcep_02_0302.html index 94fabbab5..3bbd18975 100644 --- a/docs/vpcep/umn/vpcep_02_0302.html +++ b/docs/vpcep/umn/vpcep_02_0302.html @@ -5,7 +5,7 @@

    Prerequisites

    The required VPC endpoint service is available.

    -

    Procedure

    1. Log in to the management console.
    2. Click in the upper left corner and select the required region and project.
    3. Click Service List and choose Networking > VPC Endpoint.
    1. On the VPC Endpoints page, click Create VPC Endpoint.
      The Create VPC Endpoint page is displayed.
      Figure 1 Create VPC Endpoint
      +

      Procedure

      1. Log in to the management console.
      2. Click in the upper left corner and select the required region and project.
      3. Click Service List and choose Networking > VPC Endpoint.
      1. On the VPC Endpoints page, click Create VPC Endpoint.
        The Create VPC Endpoint page is displayed.
        Figure 1 Create VPC Endpoint

      2. Configure VPC endpoint parameters. @@ -49,13 +49,28 @@

        Subnet

        -

        Specifies the subnet where the VPC endpoint is to be deployed.

        +

        This parameter is available only when you create a VPC endpoint for connecting to an interface VPC endpoint service.

        +

        Specifies the subnet where the VPC endpoint is to be deployed.

        -

        Private IP Address

        +

        IPv4 Address

        -

        This parameter is available only when you create a VPC endpoint for connecting to an interface VPC endpoint service.

        -

        Specifies the private IP address of the VPC endpoint. You can select Automatically assign or Manually specify.

        +

        This parameter is available only when you create a VPC endpoint for connecting to an interface VPC endpoint service.

        +

        Specifies the IPv4 address of the VPC endpoint.

        +

        You can select Automatically assign or Manually specify.

        + + +

        Access Control

        + +

        This parameter is available only when you create a VPC endpoint for connecting to an interface VPC endpoint service.

        +

        It controls IP addresses and CIDR blocks that are allowed to access the VPC endpoint.

        +
        • If Access Control is enabled, only IP addresses or CIDR blocks in the whitelist are allowed to access the VPC endpoint.
        • If Access Control is disabled, any IP address or CIDR block can access the VPC endpoint.
        + + +

        Whitelist

        + +

        This parameter is available only when you create a VPC endpoint for connecting to an interface VPC endpoint service and enable access control.

        +

        Lists the IP addresses or CIDR blocks that are allowed to access the VPC endpoint. You can add a maximum of 20 records.

        Tag

        @@ -68,6 +83,11 @@
      +

      Description

      + +

      Provides supplementary information about the VPC endpoint.

      + +
    @@ -91,9 +111,9 @@
-
  • Confirm the specifications and click Create Now. +
  • Confirm the specifications and click Create Now.
  • Click Back to VPC Endpoint List after the task is submitted.

    If the status of the VPC endpoint changes to Accepted, the VPC endpoint for connecting to com.t-systems.otc.eu-de.dns is created.

    -
  • In the VPC endpoint list, click the ID of the VPC endpoint to view its details.
    After a VPC endpoint for accessing interface VPC endpoint services is created, a private IP address is assigned together with a private domain name if you select Create a Private Domain Name during creation.
    Figure 2 Summary of the VPC endpoint
    +
  • In the VPC endpoint list, click the ID of the VPC endpoint to view its details.
    After a VPC endpoint for accessing interface VPC endpoint services is created, a private IP address is assigned together with a private domain name if you select Create a Private Domain Name during creation.
    Figure 2 Summary of the VPC endpoint
    • diff --git a/docs/vpcep/umn/vpcep_02_0303.html b/docs/vpcep/umn/vpcep_02_0303.html index c132c47be..3e8221b8d 100644 --- a/docs/vpcep/umn/vpcep_02_0303.html +++ b/docs/vpcep/umn/vpcep_02_0303.html @@ -6,7 +6,7 @@

    Prerequisites

    The required VPC endpoint service is available.

    Procedure

    1. Log in to the management console.
    2. Click in the upper left corner and select the required region and project.
    3. Click Service List and choose Networking > VPC Endpoint.
    4. On the VPC Endpoints page, click Create VPC Endpoint.

      The Create VPC Endpoint page is displayed.

      -
      Figure 1 Create VPC Endpoint
      +
      Figure 1 Create VPC Endpoint
    5. Configure VPC endpoint parameters.
      @@ -39,11 +39,6 @@ - - - + + +
      Table 1 VPC endpoint parameters

      Parameter

      Specifies the VPC where the VPC endpoint is to be deployed.

      Subnet

      -

      Specifies the subnet where the VPC endpoint is to be deployed.

      -

      Route Table

      This parameter is available only when you create a VPC endpoint for connecting to a gateway VPC endpoint service.

      @@ -60,6 +55,11 @@

      Description

      +

      Provides supplementary information about the VPC endpoint.

      +
      @@ -83,9 +83,9 @@
    -
  • Confirm the specifications and click Create Now. +
  • Confirm the specifications and click Create Now.
  • Click Back to VPC Endpoint List after the task is submitted.

    If the status of the VPC endpoint changes from Creating to Accepted, the VPC endpoint for connecting to com.t-systems.otc.eu-de.obs is created.

    -
  • In the VPC endpoint list, click the ID of the VPC endpoint to view its details.
    Figure 2 Summary of the VPC endpoint
    +
  • In the VPC endpoint list, click the ID of the VPC endpoint to view its details.
    Figure 2 Summary of the VPC endpoint
    • diff --git a/docs/vpcep/umn/vpcep_02_0304.html b/docs/vpcep/umn/vpcep_02_0304.html index 6aecc78fd..49f25d9b6 100644 --- a/docs/vpcep/umn/vpcep_02_0304.html +++ b/docs/vpcep/umn/vpcep_02_0304.html @@ -3,12 +3,12 @@

    Step 3: Access OBS

    Scenarios

    This section describes how to access OBS using a VPN or Direct Connect connection.

    -

    Prerequisites

    Your on-premises data center has been connected to your VPC using a VPN or Direct Connect connection.
    • The VPC subnet that needs to communicate with the on-premises data center over the VPN connection contains the OBS CIDR block 100.125.0.0/16.

      For details about how to create a VPN connection, see Creating a VPN in the Virtual Private Network User Guide.

      +

      Prerequisites

      Your on-premises data center has been connected to your VPC using a VPN or Direct Connect connection.
      • The VPC subnet that needs to communicate with the on-premises data center over the VPN connection contains the OBS CIDR block 100.125.0.0/16.

        For details about how to create a VPN connection, see Creating a VPN in the Virtual Private Network User Guide.

      • The VPC subnet that needs to communicate with the on-premises data center over the Direct Connect gateway contains the OBS CIDR block 100.125.0.0/16.

        For details about how to enable Direct Connect, see Getting Started in the Direct Connect User Guide.

      -

      Procedure

      1. In the VPC endpoint list, locate the VPC endpoint and click the ID of the endpoint to view its details.
        Figure 1 Summary of the VPC endpoint
        +

        Procedure

        1. In the VPC endpoint list, locate the VPC endpoint and click the ID of the endpoint to view its details.
          Figure 1 Summary of the VPC endpoint
        2. Add DNS records on the DNS server at your on-premises data center to forward requests for resolving OBS domain names to the VPC endpoint for accessing DNS.

          The methods of configuring DNS forwarding rules vary depending on OSs. For details, see the DNS software operation guides.

          This step uses Bind, a common DNS software, as an example to configure forwarding rules in the UNIX.

          In file /etc/named.conf, add the DNS forwarder configuration and set forwarders to the private IP address of the VPC endpoint for accessing DNS.

          diff --git a/docs/vpcep/umn/vpcep_02_0402.html b/docs/vpcep/umn/vpcep_02_0402.html index 4b8421d4b..c48458717 100644 --- a/docs/vpcep/umn/vpcep_02_0402.html +++ b/docs/vpcep/umn/vpcep_02_0402.html @@ -6,8 +6,7 @@

          Prerequisites

          The required VPC endpoint service is available.

          Procedure

          1. Log in to the management console.
          2. Click in the upper left corner and select the required region and project.
          3. Click Service List and choose Networking > VPC Endpoint.
          1. On the VPC Endpoints page, click Create VPC Endpoint.

            The Create VPC Endpoint page is displayed.

            -
            Figure 1 Create VPC Endpoint
            -
            +
            Figure 1 Create VPC Endpoint

          2. Configure VPC endpoint parameters.
            - - - + + +
            Table 1 VPC endpoint parameters

            Parameter

            @@ -41,11 +40,6 @@

            Specifies the VPC where the VPC endpoint is to be deployed.

            Subnet

            -

            Specifies the subnet where the VPC endpoint is to be deployed.

            -

            Route Table

            This parameter is available only when you create a VPC endpoint for connecting to a gateway VPC endpoint service.

            @@ -61,6 +55,11 @@

            Description

            +

            Provides supplementary information about the VPC endpoint.

            +
            @@ -84,9 +83,9 @@
          -
        3. Confirm the specifications and click Create Now.
          • If all of the specifications are correct, click Submit.
          • If any of the specifications are incorrect, click Previous to return to the previous page and modify the parameters as needed, and click Submit.
          +
        4. Confirm the specifications and click Create Now.
          • If all of the specifications are correct, click Submit.
          • If any of the specifications are incorrect, click Previous to return to the previous page, modify the parameters as needed, and click Submit.
        5. Click Back to VPC Endpoint List after the task is submitted.

          If the status of the VPC endpoint changes from Creating to Accepted, the VPC endpoint for connecting to com.t-systems.otc.eu-nl.obs-internet is created.

          -
        6. In the VPC endpoint list, click the ID of the VPC endpoint to view its details.
          Figure 2 Summary of the VPC endpoint
          +
        7. In the VPC endpoint list, click the ID of the VPC endpoint to view its details.
          Figure 2 Summary of the VPC endpoint
      diff --git a/docs/vpcep/umn/vpcep_02_0403.html b/docs/vpcep/umn/vpcep_02_0403.html index fde728e31..76cadb948 100644 --- a/docs/vpcep/umn/vpcep_02_0403.html +++ b/docs/vpcep/umn/vpcep_02_0403.html @@ -3,7 +3,7 @@

      Step 2: Access OBS

      Scenarios

      This section describes how to access OBS using a VPN or Direct Connect connection.

      -

      Prerequisites

      Your on-premises data center has been connected to your VPC using a VPN or Direct Connect connection.
      • The VPC subnet associated with the VPN gateway contains the OBS CIDR block.

        For details about how to create a VPN connection, see Creating a VPN in the Virtual Private Network User Guide.

        +

        Prerequisites

        Your on-premises data center has been connected to your VPC using a VPN or Direct Connect connection.
        • The VPC subnet associated with the VPN gateway contains the OBS CIDR block.

          For details about how to create a VPN connection, see Creating a VPN in the Virtual Private Network User Guide.

        • The VPC subnet associated with the Direct Connect gateway contains the OBS CIDR block.

          For details about how to enable Direct Connect, see Getting Started in the Direct Connect User Guide.

        diff --git a/docs/vpcep/umn/vpcep_03_0102.html b/docs/vpcep/umn/vpcep_03_0102.html index 3d9229686..4185d8b4e 100644 --- a/docs/vpcep/umn/vpcep_03_0102.html +++ b/docs/vpcep/umn/vpcep_03_0102.html @@ -3,15 +3,18 @@

        Viewing a VPC Endpoint Service

        Scenarios

        This section describes how to query details of a VPC endpoint service, including its name, ID, backend resource type, backend resource name, VPC, status, connection approval, service type, and creation time.

        -

        Procedure

        1. Log in to the management console.
        2. Click in the upper left corner and select the required region and project.
        1. Click Service List and choose Networking > VPC Endpoint.
        2. In the navigation pane on the left, choose VPC Endpoint > VPC Endpoint Services.

          Locate the VPC endpoint service by entering a filter in the search box in the upper right corner:

          -
          • Search by name or ID.
            1. Select Name or ID in the filter box.
            2. Enter a keyword in the search box.
            3. Click to start the search.

              VPC endpoint services containing the keyword are displayed.

              +

              Procedure

              1. Log in to the management console.
              2. Click in the upper left corner and select the required region and project.
              1. Click Service List and choose Networking > VPC Endpoint.
              2. In the navigation pane on the left, choose VPC Endpoint > VPC Endpoint Services.

                Locate the VPC endpoint service by entering a filter in the upper search box:

                +
                • Search for a VPC endpoint service by parameters including Name, ID, VPC ID, VPC, Backend Resource Type, Status, Connection Approval, Created, or Description. Take name or ID as an example.
                  1. Select Name or ID in the filter box.
                    Figure 1 Searching by name or ID
                    +
                  2. Enter a keyword in the search box.
                    Figure 2 Entering a keyword for search
                    +
                  3. Press Enter to start searching.

                    VPC endpoint services containing the keyword are displayed.

                  -
                • Search by tag.
                  1. Click the filter box and select Tag from the drop-down list.
                    Figure 1 Searching for VPC endpoint services by tag
                    -
                  2. Select tags.
                    Figure 2 Selecting tags
                    -
                  3. Click OK to search.

                    VPC endpoint services containing the specified tags are displayed.

                    +
                  4. Search by tag.
                    1. Click the filter box and select a tag from the drop-down list.
                      Figure 3 Selecting a tag
                      +
                    2. Select the tag value.
                      Figure 4 Selecting tag values
                      +
                    3. View the search result.

                      The VPC endpoint service list displays the VPC endpoint services that match the specified tags.

                      +
                      Figure 5 Search results
                -
              3. In the VPC endpoint service list, locate the VPC endpoint service and click its name to view its details.
                Figure 3 Summary of the VPC endpoint service
                +
              4. In the VPC endpoint service list, locate the VPC endpoint service and click its name to view its details.
                Figure 6 Summary of the VPC endpoint service

                Table 1 describes the parameters displayed on the VPC endpoint service details page.

                + + + + + + + +
                Table 1 Parameters contained in the details of a VPC endpoint service

                Tab

                @@ -85,6 +88,13 @@

                Specifies the creation time of the VPC endpoint service.

                Summary

                +

                Description

                +

                Provides supplementary information about the VPC endpoint service.

                +

                Connection Management

                VPC Endpoint ID

                @@ -121,6 +131,13 @@

                Specifies the creation time of the VPC endpoint.

                Connection Management

                +

                Description

                +

                Specifies the description of the connection management.

                +

                Connection Management

                Operation

                diff --git a/docs/vpcep/umn/vpcep_03_0103.html b/docs/vpcep/umn/vpcep_03_0103.html index 0d6942ef1..a44f3b855 100644 --- a/docs/vpcep/umn/vpcep_03_0103.html +++ b/docs/vpcep/umn/vpcep_03_0103.html @@ -9,8 +9,8 @@

                -

                Procedure

                1. Log in to the management console.
                2. Click in the upper left corner and select the required region and project.
                1. Click Service List and choose Networking > VPC Endpoint.
                1. In the navigation pane on the left, choose VPC Endpoint > VPC Endpoint Services.
                2. In the VPC endpoint service list, locate the VPC endpoint service and click Delete in the Operation column.
                  Figure 1 Delete VPC Endpoint Service
                  -
                3. In the Delete VPC Endpoint Service dialog box, click Yes.
                +

                Procedure

                1. Log in to the management console.
                2. Click in the upper left corner and select the required region and project.
                1. Click Service List and choose Networking > VPC Endpoint.
                1. In the navigation pane on the left, choose VPC Endpoint > VPC Endpoint Services.
                2. In the VPC endpoint service list, locate the VPC endpoint service and click Delete in the Operation column.
                  Figure 1 Delete VPC Endpoint Service
                  +
                3. In the Delete This VPC Endpoint Service dialog box, click OK.
                diff --git a/docs/vpcep/umn/vpcep_03_0104.html b/docs/vpcep/umn/vpcep_03_0104.html index 2a836fe6d..d1e4331e9 100644 --- a/docs/vpcep/umn/vpcep_03_0104.html +++ b/docs/vpcep/umn/vpcep_03_0104.html @@ -6,7 +6,7 @@

                Prerequisites

                There is a VPC endpoint available for connecting to the target VPC endpoint service.

                -

                Procedure

                1. Log in to the management console.
                2. Click in the upper left corner and select the required region and project.
                1. Click Service List and choose Networking > VPC Endpoint.
                1. In the navigation pane on the left, choose VPC Endpoint > VPC Endpoint Services.
                2. In the VPC endpoint service list, locate the VPC endpoint service and click its name.
                3. Select the Connection Management tab.
                  Figure 1 Connection Management
                  +

                  Procedure

                  1. Log in to the management console.
                  2. Click in the upper left corner and select the required region and project.
                  1. Click Service List and choose Networking > VPC Endpoint.
                  1. In the navigation pane on the left, choose VPC Endpoint > VPC Endpoint Services.
                  2. In the VPC endpoint service list, locate the VPC endpoint service and click its name.
                  3. Select the Connection Management tab.
                    Figure 1 Connection Management
                  4. Accept or reject connection from a VPC endpoint in the list based on service requirements.
                    • If you click Accept, the VPC endpoint can connect to the VPC endpoint service.
                    • If you click Reject, the VPC endpoint cannot connect to the VPC endpoint service.
                  diff --git a/docs/vpcep/umn/vpcep_03_0105.html b/docs/vpcep/umn/vpcep_03_0105.html index 3a898bc21..8047a0864 100644 --- a/docs/vpcep/umn/vpcep_03_0105.html +++ b/docs/vpcep/umn/vpcep_03_0105.html @@ -6,14 +6,14 @@
                  • If the whitelist is empty, access from a VPC endpoint in another account is not allowed.
                  • If an authorized account ID is already in the whitelist, you can use this account to create a VPC endpoint for connecting to the VPC endpoint service.
                  • If an authorized account ID is not in the whitelist, you cannot use this account to create a VPC endpoint for connecting to the VPC endpoint service.

                  This section describes how to add or delete a whitelist record for a VPC endpoint service.

                -

                Add a Whitelist Record

                1. Log in to the management console.
                2. Click in the upper left corner and select the required region and project.
                1. Click Service List and choose Networking > VPC Endpoint.
                1. In the navigation pane on the left, choose VPC Endpoint > VPC Endpoint Services.
                2. In the VPC endpoint service list, locate the VPC endpoint service and click its name.
                3. On the displayed page, select the Permission Management tab and click Add to Whitelist.
                4. Enter an authorized account ID in the required format and click OK.
                  Figure 1 Add to Whitelist
                  +

                  Add a Whitelist Record

                  1. Log in to the management console.
                  2. Click in the upper left corner and select the required region and project.
                  1. Click Service List and choose Networking > VPC Endpoint.
                  1. In the navigation pane on the left, choose VPC Endpoint > VPC Endpoint Services.
                  2. In the VPC endpoint service list, locate the VPC endpoint service and click its name.
                  3. On the displayed page, select the Permission Management tab and click Add to Whitelist.
                  4. Enter an authorized account ID in the required format and click OK.
                    Figure 1 Add to Whitelist
                    • Your account is in the whitelist of your VPC endpoint service by default.
                    • The authorized account ID is in the iam:domain::domain_id format.

                      domain_id indicates the ID of the authorized account, for example, iam:domain::1564ec50ef2a47c791ea5536353ed4b9

                    • Adding * to the whitelist means that all users can access the VPC endpoint service.

                  Delete a Whitelist Record

                  1. Log in to the management console.
                  2. Click in the upper left corner and select the required region and project.
                  1. Click Service List and choose Networking > VPC Endpoint.
                  1. In the navigation pane on the left, choose VPC Endpoint > VPC Endpoint Services.
                  2. In the VPC endpoint service list, locate the VPC endpoint service and click its name.
                  3. On the displayed page, click the Permission Management tab, locate the account ID, and click Delete in the Operation column.

                    To delete multiple whitelist records, select the account IDs to be deleted and click Delete in the upper left corner.

                    -
                  4. Click Yes.
                  +
                5. In the displayed dialog box, click OK.
                diff --git a/docs/vpcep/umn/vpcep_03_0106.html b/docs/vpcep/umn/vpcep_03_0106.html index 5cdb59ef1..c2478e76e 100644 --- a/docs/vpcep/umn/vpcep_03_0106.html +++ b/docs/vpcep/umn/vpcep_03_0106.html @@ -5,7 +5,7 @@

                A port mapping defines the protocol and ports used for communications between a VPC endpoint and a VPC endpoint service.

                • Protocol: a protocol both supported by the VPC endpoint and VPC endpoint service
                • Service Port: provided by the backend resource bound to the VPC endpoint service.
                • Terminal Port: provided by the VPC endpoint, allowing you to access the VPC endpoint service.
                -

                Procedure

                1. Log in to the management console.
                2. Click in the upper left corner and select the required region and project.
                1. Click Service List and choose Networking > VPC Endpoint.
                1. In the navigation pane on the left, choose VPC Endpoint > VPC Endpoint Services.
                2. In the VPC endpoint service list, locate the VPC endpoint service and click its name.
                3. On the displayed page, select the Port Mapping tab.
                  The port mappings configured for the VPC endpoint service are displayed.
                  Figure 1 Port Mapping
                  +

                  Procedure

                  1. Log in to the management console.
                  2. Click in the upper left corner and select the required region and project.
                  1. Click Service List and choose Networking > VPC Endpoint.
                  1. In the navigation pane on the left, choose VPC Endpoint > VPC Endpoint Services.
                  2. In the VPC endpoint service list, locate the VPC endpoint service and click its name.
                  3. On the displayed page, select the Port Mapping tab.
                    The port mappings configured for the VPC endpoint service are displayed.
                    Figure 1 Port Mapping
                  diff --git a/docs/vpcep/umn/vpcep_03_0108.html b/docs/vpcep/umn/vpcep_03_0108.html index 7c8f99d12..45c4c5ac8 100644 --- a/docs/vpcep/umn/vpcep_03_0108.html +++ b/docs/vpcep/umn/vpcep_03_0108.html @@ -39,7 +39,7 @@

                  Delete a Tag

                  Perform the following operations to delete a tag of a VPC endpoint service:

                  Deleted tags cannot be recovered. Exercise caution when performing this operation.

                  -
                  1. Log in to the management console.
                  2. Click in the upper left corner and select the required region and project.
                  1. Click Service List and choose Networking > VPC Endpoint.
                  1. In the navigation pane on the left, choose VPC Endpoint > VPC Endpoint Services.
                  2. In the VPC endpoint service list, locate the VPC endpoint service and click its name.
                  3. On the displayed page, select the Tags tab.
                  4. In the tag list, locate the tag and click Delete in the Operation column.
                  5. Click Yes.
                  +
                  1. Log in to the management console.
                  2. Click in the upper left corner and select the required region and project.
                  1. Click Service List and choose Networking > VPC Endpoint.
                  1. In the navigation pane on the left, choose VPC Endpoint > VPC Endpoint Services.
                  2. In the VPC endpoint service list, locate the VPC endpoint service and click its name.
                  3. On the displayed page, select the Tags tab.
                  4. In the tag list, locate the tag and click Delete in the Operation column.
                  5. In the displayed dialog box, click OK.
                  diff --git a/docs/vpcep/umn/vpcep_03_0200.html b/docs/vpcep/umn/vpcep_03_0200.html index 46bcf2e30..4bcff1f88 100644 --- a/docs/vpcep/umn/vpcep_03_0200.html +++ b/docs/vpcep/umn/vpcep_03_0200.html @@ -12,6 +12,8 @@
                4. Deleting a VPC Endpoint
                  5. +
                5. Configuring Access Control for a VPC Endpoint
                  +
                6. Managing Tags of a VPC Endpoint
                  7. diff --git a/docs/vpcep/umn/vpcep_03_0202.html b/docs/vpcep/umn/vpcep_03_0202.html index 9b7da2396..2d5fd1efa 100644 --- a/docs/vpcep/umn/vpcep_03_0202.html +++ b/docs/vpcep/umn/vpcep_03_0202.html @@ -5,22 +5,24 @@

                Constraints

                One VPC endpoint supports up to 3,000 concurrent connections.

                -

                Querying a VPC Endpoint

                Perform the following operations to query details of a VPC endpoint, including its ID, associated VPC endpoint service name, VPC, and status.

                -
                1. Log in to the management console.
                2. Click in the upper left corner and select the required region and project.
                1. Click Service List and choose Networking > VPC Endpoint.

                  On the displayed page, locate the VPC endpoint by entering a keyword in the search box in the upper right corner:

                  -
                  • Search by VPC endpoint service name or VPC endpoint ID.
                    1. Select ID or VPC Endpoint Service Name in the filter box.
                    2. Enter a keyword in the search box.
                    3. Click to start the search.

                      VPC endpoints containing the keyword are displayed in the VPC endpoint list.

                      +

                      Querying a VPC Endpoint

                      You can query details of a VPC endpoint, including its ID, VPC, VPC endpoint service name, creation time, private domain name, status, type, IPv4 address, access control, and description.

                      +
                      1. Log in to the management console.
                      2. Click in the upper left corner and select the required region and project.
                      1. Click Service List and choose Networking > VPC Endpoint.

                        On the displayed page, locate the VPC endpoint by entering a keyword in the upper search box:

                        +
                        • Search for a VPC endpoint by parameters including ID, VPC, VPC ID, Status, VPC Endpoint Service Name, Type, IPv4, Created, or Description. Take ID or VPC Endpoint Service Name as an example.
                          1. Select ID or VPC Endpoint Service Name in the filter box.
                            Figure 1 Searching by ID or VPC endpoint service name
                            +
                          2. Enter a keyword in the search box.
                            Figure 2 Entering a keyword for search
                            +
                          3. Press Enter to start searching.

                            VPC endpoints containing the keyword are displayed in the VPC endpoint list.

                          -
                        • Search by tag.
                          1. Click the filter box and select keys from the drop-down list.
                            Figure 1 Selecting tag keys
                            -
                          2. Select tag values for the selected tag keys.
                            Figure 2 Selecting tag values
                            +
                          3. Search by tag.
                            1. Click the filter box and select keys from the drop-down list.
                              Figure 3 Selecting tag keys
                              +
                            2. Select tag values for the selected tag keys.
                              Figure 4 Selecting tag values
                            3. View the search result.

                              The VPC endpoint list displays the VPC endpoints that match the specified tags.

                        -
                      2. In the VPC endpoint list, click the ID of the VPC endpoint to view its details.
                        After an interface VPC endpoint is created, a private IP address is assigned together with a private domain name if you select Create a Private Domain Name.
                        Figure 3 Summary of the VPC endpoint (for accessing an interface VPC endpoint service)
                        +
                      3. In the VPC endpoint list, click the ID of the VPC endpoint to view its details.
                        After an interface VPC endpoint is created, an IPv4 address is assigned together with a private domain name if you select Create a Private Domain Name.
                        Figure 5 Summary of the VPC endpoint (for accessing an interface VPC endpoint service)
                        -
                        Figure 4 Summary of the VPC endpoint (for accessing a gateway VPC endpoint service)
                        +
                        Figure 6 Summary of the VPC endpoint (for accessing a gateway VPC endpoint service)
                        -
                        + + + + - + + + + + + + + +
                        Table 1 Parameters contained in the details of a VPC endpoint

                        Tab

                        +
                        - @@ -82,11 +84,42 @@ + + + + + + + + + + + + + + + + - - - -
                        Table 1 Parameters contained in the details of a VPC endpoint

                        Tab

                        Parameter

                        +

                        Parameter

                        Description

                        Specifies the creation time of the VPC endpoint.

                        Summary

                        +

                        Access Control

                        +

                        Specifies whether the whitelist is enabled for IP addresses to access this VPC endpoint.

                        +
                        • If Access Control is enabled, only IP addresses or CIDR blocks in the whitelist are allowed to access the VPC endpoint.
                        • If Access Control is disabled, any IP address or CIDR block can access the VPC endpoint.
                        +
                        NOTE:

                        Access control can be enabled only for VPC endpoints for connecting to an interface VPC endpoint service.

                        +
                        +

                        Summary

                        +

                        Description

                        +

                        Provides supplementary information about the VPC endpoint.

                        +

                        Access Control

                        +

                        IP Address or CIDR Block

                        +

                        Specifies the IP addresses and CIDR blocks that are allowed to access the VPC endpoint.

                        +

                        Access Control

                        +

                        Operation

                        +

                        Specifies the operation to be performed on whitelist records of the VPC endpoint. Only deletion is supported.

                        +

                        Route Tables

                        Name

                        +

                        Name/ID

                        Specifies the name of the route table.

                        +

                        Specifies the name or ID of the route table.

                        Route Tables

                        @@ -100,7 +133,7 @@

                        Type

                        Specifies the type of the route table, which can be Default and Custom.

                        +

                        Specifies the type of the route table, which can be Default and Custom.

                        Route Tables

                        @@ -114,7 +147,7 @@

                        Operation

                        Specifies the operation to be performed on the route table. The operation can be Disassociate or Associate.

                        +

                        Specifies the operation to be performed on the route table. The operation can be Disassociate or Associate.

                        Tags

                        @@ -141,6 +174,8 @@
                        +
                        • The Access Control tab is displayed only for VPC endpoints for connecting to interface VPC endpoint services.
                        • The Route Tables tab is displayed only for VPC endpoints for connecting to gateway VPC endpoint services.
                        +

                        Accessing a VPC Endpoint via Its Private IP Address

                        Perform the following operations to access a VPC endpoint via its private IP address:

                        @@ -156,7 +191,7 @@
                        1. Log in to the management console.
                        2. In the service list, choose Network > Domain Name Service.

                          The DNS console is displayed.

                        3. In the navigation pane, choose Private Zones.

                          The Private Zones page is displayed.

                        1. In the private zone list, click the name of the private zone.

                          The Record Sets page is displayed.

                          -
                        2. In the record set list, locate the A record set and view its information.
                          When Status changes to Normal, the resolution takes effect.
                          Figure 5 Record set of the private domain name
                          +
                        3. In the record set list, locate the A record set and view its information.
                          When Status changes to Normal, the resolution takes effect.
                          Figure 7 Record set of the private domain name

                        Accessing a VPC endpoint via its private domain name

                        diff --git a/docs/vpcep/umn/vpcep_03_0203.html b/docs/vpcep/umn/vpcep_03_0203.html index a890cd9ad..cf610df22 100644 --- a/docs/vpcep/umn/vpcep_03_0203.html +++ b/docs/vpcep/umn/vpcep_03_0203.html @@ -5,8 +5,8 @@

                        Deleted VPC endpoints cannot be recovered. Exercise caution when performing this operation.

                        -

                        Procedure

                        1. Log in to the management console.
                        2. Click in the upper left corner and select the required region and project.
                        3. Click Service List and choose Networking > VPC Endpoint.
                        4. In the navigation pane on the left, choose VPC Endpoint > VPC Endpoints.
                        5. In the VPC endpoint list, locate the VPC endpoint and click Delete in the Operation column.
                          Figure 1 Delete VPC Endpoint
                          -
                        6. In the Delete VPC Endpoint dialog box, click Yes.
                        +

                        Procedure

                        1. Log in to the management console.
                        2. Click in the upper left corner and select the required region and project.
                        3. Click Service List and choose Networking > VPC Endpoint.
                        4. In the navigation pane on the left, choose VPC Endpoint > VPC Endpoints.
                        5. In the VPC endpoint list, locate the VPC endpoint and click Delete in the Operation column.
                          Figure 1 Delete VPC Endpoint
                          +
                        6. In the Delete VPC Endpoint dialog box, click OK.
                        diff --git a/docs/vpcep/umn/vpcep_03_0204.html b/docs/vpcep/umn/vpcep_03_0204.html index 83eb361e8..2cedde75b 100644 --- a/docs/vpcep/umn/vpcep_03_0204.html +++ b/docs/vpcep/umn/vpcep_03_0204.html @@ -34,6 +34,13 @@

                        Deleted VPC endpoints cannot be recovered. Exercise caution when performing this operation.

                        Configuring Access Control for a VPC Endpoint

                        +

                        Describes how to enable access control for a VPC endpoint and configure a whitelist of IP addresses or CIDR blocks that are allowed to access the VPC endpoint.

                        +
                        • Access Control is only available for VPC endpoints for connecting to interface VPC endpoint services.
                        • If Access Control is disabled, any IP address can access the VPC endpoint.
                        • A maximum of 20 whitelist records can be added.
                        +

                        Managing Tags of a VPC Endpoint

                        Describes how to query, add, edit, and delete VPC endpoint tags.

                        diff --git a/docs/vpcep/umn/vpcep_03_0205.html b/docs/vpcep/umn/vpcep_03_0205.html new file mode 100644 index 000000000..bbe0fc1f8 --- /dev/null +++ b/docs/vpcep/umn/vpcep_03_0205.html @@ -0,0 +1,22 @@ + + +

                        Configuring Access Control for a VPC Endpoint

                        +

                        Scenarios

                        To control IP addresses and CIDR blocks that can access a VPC endpoint, configure a whitelist. You can add or delete a whitelist record, or disable access control if you no longer need it.

                        +

                        For details about how to configure access control and whitelist when you are creating a VPC endpoint, see Creating a VPC Endpoint.

                        +

                        This section describes how to enable and configure access control after a VPC endpoint is created.

                        +
                        +

                        Constraints

                        • Access Control is only available for VPC endpoints for connecting to interface VPC endpoint services.
                        • If Access Control is disabled, any IP address can access the VPC endpoint.
                        • A maximum of 20 whitelist records can be added.
                        +
                        +

                        Enable Access Control and Add a Whitelist Record

                        1. Log in to the management console.
                        2. Click in the upper left corner and select the required region and project.
                        1. Click Service List and choose Networking > VPC Endpoint.
                        1. In the VPC endpoint list, locate the VPC endpoint and click its ID.
                        2. On the displayed page, click the Access Control tab.
                        3. On the Access Control tab, click Add to Whitelist.
                          Figure 1 Adding a whitelist record for the VPC endpoint
                          +
                        4. Enter the authorized IP addresses or CIDR blocks.
                        5. Click OK.
                        +
                        +

                        Delete a Whitelist Record

                        1. Log in to the management console.
                        2. Click in the upper left corner and select the required region and project.
                        1. Click Service List and choose Networking > VPC Endpoint.
                        1. In the VPC endpoint list, locate the VPC endpoint and click its ID.
                        2. Select the Access Control tab.
                        3. In the whitelist, locate the IP address or CIDR block and click Delete in the Operation column.

                          To delete whitelist records, select all the target IP addresses or CIDR blocks and click Delete in the upper left corner.

                          +
                        4. In the displayed Delete from Whitelist dialog box, click OK.
                        +
                        +
                        +
                        +
                        +
                        Parent topic: VPC Endpoints
                        +
                        +
                        + diff --git a/docs/vpcep/umn/vpcep_03_0206.html b/docs/vpcep/umn/vpcep_03_0206.html index a54f97374..d79c929f5 100644 --- a/docs/vpcep/umn/vpcep_03_0206.html +++ b/docs/vpcep/umn/vpcep_03_0206.html @@ -37,7 +37,7 @@
                      4. Click OK.

                        5. Delete a Tag

                        You can delete tags added to a VPC endpoint. Deleted tags cannot be restored. Exercise caution when performing this operation.

                        -
                        1. Log in to the management console.
                        2. Click in the upper left corner and select the required region and project.
                        1. Click Service List and choose Networking > VPC Endpoint.
                        1. In the VPC endpoint list, locate the VPC endpoint and click its ID.
                        1. On the displayed page, select the Tags tab.
                        1. In the tag list, locate the tag and click Delete in the Operation column.
                        2. Click Yes.
                        +
                        1. Log in to the management console.
                        2. Click in the upper left corner and select the required region and project.
                        1. Click Service List and choose Networking > VPC Endpoint.
                        1. In the VPC endpoint list, locate the VPC endpoint and click its ID.
                        1. On the displayed page, select the Tags tab.
                        1. In the tag list, locate the tag and click Delete in the Operation column.
                        2. In the displayed dialog box, click OK.
                        diff --git a/docs/vpcep/umn/vpcep_03_0500.html b/docs/vpcep/umn/vpcep_03_0500.html index c6d5fdce6..767674e90 100644 --- a/docs/vpcep/umn/vpcep_03_0500.html +++ b/docs/vpcep/umn/vpcep_03_0500.html @@ -1,10 +1,10 @@

                        Quotas

                        -

                        What Is Quota?

                        Quotas can limit the number or amount of resources available to users, such as the maximum number of ECSs or EVS disks that can be created.

                        +

                        What Is Quota?

                        Quotas can limit the number or amount of resources available to users, such as the maximum number of ECS or EVS disks that can be created.

                        If the existing resource quota cannot meet your service requirements, you can apply for a higher quota.

                        -

                        How Do I View My Quotas?

                        1. Log in to the management console.
                        2. Click in the upper left corner and select the desired region and project.
                        3. In the upper right corner of the page, click .

                          The Service Quota page is displayed.

                          +

                          How Do I View My Quotas?

                          1. Log in to the management console.
                          2. Click in the upper left corner and select the desired region and project.
                          3. In the upper right corner of the page, click .

                            The Quotas page is displayed.

                          4. View the used and total quota of each type of resources on the displayed page.

                            If a quota cannot meet service requirements, apply for a higher quota.

                          diff --git a/docs/vpcep/umn/vpcep_0_0002.html b/docs/vpcep/umn/vpcep_0_0002.html index c6bcaea44..6920680aa 100644 --- a/docs/vpcep/umn/vpcep_0_0002.html +++ b/docs/vpcep/umn/vpcep_0_0002.html @@ -8,7 +8,25 @@

                        2024-07-26

                        +

                        2025-05-20

                        +

                        This release incorporates the following changes:

                        +

                        Updated the description for displaying the route table tab for VPC endpoints in Querying and Accessing a VPC Endpoint.

                        +

                        2025-04-30

                        +

                        This release incorporates the following changes:

                        + +

                        2025-01-15

                        +

                        This release incorporates the following changes:

                        + +

                        2024-07-26

                        This release incorporates the following changes:

                        Updated the description of the Tag value in Step 1: Create a VPC Endpoint Service, Step 2: Create a VPC Endpoint, Step 1: Create a VPC Endpoint Service, Step 3: Create a VPC Endpoint, Step 1: Create a VPC Endpoint for Connecting to DNS, Step 2: Create a VPC Endpoint for Connecting to OBS, Step 1: Create a VPC Endpoint for Accessing OBS, Creating a VPC Endpoint Service, Managing Tags of a VPC Endpoint Service, Creating a VPC Endpoint, and Managing Tags of a VPC Endpoint.

                        @@ -17,7 +35,7 @@

                        2024-07-24

                        This release incorporates the following changes:

                        - +

                        2024-07-10

                        @@ -35,7 +53,7 @@

                        2023-06-25

                        This release incorporates the following changes:

                        - +

                        2023-06-13

                        diff --git a/docs/vpcep/umn/vpcep_pd_0001.html b/docs/vpcep/umn/vpcep_pd_0001.html index cb3f5d6e3..aecc2bb6a 100644 --- a/docs/vpcep/umn/vpcep_pd_0001.html +++ b/docs/vpcep/umn/vpcep_pd_0001.html @@ -5,7 +5,7 @@

                        With IAM, you can use your account to create IAM users and assign permissions to control their access to specific cloud resources. For example, if you want website maintenance personnel in your enterprise to use VPC Endpoint resources but do not want them to delete other cloud resources or perform any other high-risk operations, you can create IAM users and grant only permissions to use VPC Endpoint resources.

                        If your account does not require individual IAM users for permissions management, you can skip this section.

                        IAM is a free service. You only pay for the resources in your account.

                        -

                        For more information about IAM, see IAM Service Overview.

                        +

                        For more information about IAM, see IAM Service Overview.

                        VPC Endpoint Permissions

                        New IAM users do not have any permissions assigned by default. You need to first add them to one or more groups and attach policies or roles to these groups. The users then inherit permissions from the groups and can perform specified operations on cloud services based on the permissions they have been assigned.

                        VPC Endpoint is a project-level service deployed for specific regions. You need to select a project for which the permissions will be granted. If you select All projects, the permissions will be granted for all the projects. When accessing VPC Endpoint, the users need to switch to the authorized region.

                        Table 1 lists all system-defined roles for VPC Endpoint. diff --git a/docs/vpcep/umn/vpcep_ug_0003.html b/docs/vpcep/umn/vpcep_ug_0003.html index 941cd04d4..637f645f9 100644 --- a/docs/vpcep/umn/vpcep_ug_0003.html +++ b/docs/vpcep/umn/vpcep_ug_0003.html @@ -1,16 +1,16 @@

                        Creating a User and Granting VPC Endpoint Permissions

                        -

                        Use IAM to implement fine-grained permissions control over your VPC Endpoint resources. With IAM, you can:

                        +

                        Use IAM to implement fine-grained permissions control over your VPC Endpoint resources. With IAM, you can:

                        • Create IAM users for employees based on your enterprise's organizational structure. Each IAM user has their own security credentials for accessing VPC Endpoint resources.
                        • Grant only the permissions required for users to perform a specific task.
                        • Entrust an account or a cloud service to perform efficient O&M on your VPC Endpoint resources.

                        If your account does not need individual IAM users, skip this section.

                        This section describes the process flow for granting permissions (see Figure 1).

                        -

                        Prerequisites

                        You must learn about permissions (see Permissions) supported by VPC Endpoint and choose policies or roles according to your requirements. To grant permissions for other services, learn about all Permissions supported by IAM.

                        +

                        Prerequisites

                        You must learn about permissions (see Permissions) supported by VPC Endpoint and choose policies or roles according to your requirements. To grant permissions for other services, learn about all Permissions supported by IAM.

                        Process Flow

                        Figure 1 Process for granting VPC Endpoint permissions
                        -
                        1. Create a user group and assign it permissions.

                          On the IAM console, create a user group and attach the VPCEndpoint Administrator policy to the group.

                          -
                        2. Create an IAM user and add it to the created user group.

                          Create an IAM user and add it to the user group created in 1.

                          -
                        3. Log in as the IAM user and verify permissions.

                          In the authorized region, perform the following operations:

                          +
                          1. Create a user group and assign it permissions.

                            On the IAM console, create a user group and attach the VPCEndpoint Administrator policy to the group.

                            +
                          2. Create an IAM user and add it to the created user group.

                            Create an IAM user and add it to the user group created in 1.

                            +
                          3. Log in as the IAM user and verify permissions.

                            In the authorized region, perform the following operations:

                            • On the Service List page, choose VPC Endpoint. Click Create VPC Endpoint in the upper right corner. If you can create a VPC endpoint, the VPCEndpoint Administrator policy has already taken effect.
                            • Choose another service from Service List. If a message appears indicating that you have insufficient permissions to access the service, the VPCEndpoint Administrator policy has already taken effect.