Help Center/ VPC Endpoint/ User Guide/ VPC Endpoints/ VPC Endpoint Overview
Updated on 2026-10-30 GMT+08:00
View PDF

VPC Endpoint Overview

Overview

VPC endpoints are secure and private channels for connecting VPCs to VPC endpoint services.

You can buy a VPC endpoint to connect a VPC to a VPC endpoint service in another VPC of the same region.

VPC endpoints include interface and gateway types, selected based on the type of VPC endpoint service they access.

  • Interface VPC endpoints are used to access interface VPC endpoint services and are elastic network interfaces that have private IP addresses.
  • Gateway VPC endpoints are used to access gateway VPC endpoint services and work as gateways, with routes configured to distribute traffic to the associated gateway VPC endpoint services.

Related Operations

Operation

Description

Constraint

Buying a VPC Endpoint

Describes how to buy a VPC endpoint.
  • VPC endpoints are region-level resources. Select a region and project when you buy such a VPC endpoint.
  • A maximum of 100 VPC endpoints can be purchased in a region.
  • When you buy a VPC endpoint, ensure that the target VPC endpoint service exists and is in the same region as the VPC endpoint.
  • Only one basic VPC endpoint can be created in a VPC subnet for accessing a VPC endpoint service.
  • When you create multiple VPC endpoints in a VPC for accessing the same VPC endpoint service, you can enable Create a Private Domain Name for only one VPC endpoint. If you want to access multiple VPC endpoints using a private domain name, you need to modify the DNS record set.
  • VPC endpoints are billed based on the subscription duration.

Managing VPC Endpoints

Describes how to manage VPC endpoints.

Deleted VPC endpoints cannot be recovered.

Configuring Access Control for an Interface VPC Endpoint

Describes how to enable access control for a VPC endpoint and configure IP addresses and CIDR blocks that are allowed to access the VPC endpoint.
  • Access Control is only available for VPC endpoints that are connected to interface VPC endpoint services.
  • If Access Control is disabled for a VPC endpoint, any IP address can access the VPC endpoint.
  • A maximum of 20 whitelist records can be added.

Accessing an Interface VPC Endpoint Through Its IP Address or Private Domain Name

Describes how to query the details of a VPC endpoint.

One VPC endpoint supports up to 3,000 concurrent connections.

Managing Tags of a VPC Endpoint

Describes how to query, add, edit, and delete VPC endpoint tags.

You can add up to 20 tags to each VPC endpoint.
Parent topic: VPC Endpoints