Help Center/ VPC Endpoint/ User Guide/ VPC Endpoint Services/ VPC Endpoint Service Overview
Updated on 2024-10-22 GMT+08:00

VPC Endpoint Service Overview

A VPC endpoint service is a cloud service or a private service that can be accessed through a VPC endpoint.

There are two types of VPC endpoint services: gateway and interface.
  • Gateway VPC endpoint services are created only for cloud services.
  • Interface VPC endpoint services can be created for both cloud services and your private services. Cloud services are configured as VPC endpoint services by the O&M personnel by default. However, you need to create VPC endpoint services for your private services.

Supported cloud services vary in different regions. For details, see the services that can be configured on the management console.

Only in the LA-Mexico City1, LA-Sao Paulo1, and LA-Santiago regions, can OBS be configured as a gateway VPC endpoint service on the VPC Endpoint console.

To access OBS as gateway VPC endpoint services in other regions, you need to search for it by name. To obtain its name, you can submit a service ticket or contact the OBS O&M engineers.

This section describes how to configure a VPC endpoint service (interface type) from your private service and how to manage it.

Table 1 Management of VPC endpoint services

Operation

Description

Constraint

Creating a VPC Endpoint Service

Describes how to configure a private service as a VPC endpoint service.

  • VPC endpoint services are region-level resources. Select a region and project when you create such a service.
  • Each tenant can create a maximum of 20 VPC endpoint services.
  • The following private services can be configured into VPC endpoint services:
    • Elastic load balancer: Backend resources of this type suit services that receive high access traffic and demand high reliability and disaster recovery (DR) performance.
    • ECS: Backend resources of this type serve as servers.
    • BMS: Backend resources of this type serve as servers. You can choose BMS when you choose IPv4 for Network Type.
  • One VPC endpoint service corresponds to only one backend resource.

Viewing a VPC Endpoint Service

Describes how to query details about a VPC endpoint service.

None

Deleting a VPC Endpoint Service

Describes how to delete a VPC endpoint service.

  • Deleted VPC endpoint services cannot be recovered. Exercise caution when performing this operation.
  • Only VPC endpoint services configured from users' private services can be deleted.
  • VPC endpoint services in the Accepted or Creating state cannot be deleted.

Managing Connections of a VPC Endpoint Service

Describes how to set connection approval of a VPC endpoint service to determine whether to allow a VPC endpoint to connect to the VPC endpoint service.

You can specify whether to allow a VPC endpoint to connect to a VPC endpoint service only when connection approval is enabled during VPC endpoint service creation.

Managing Whitelist Records of a VPC Endpoint Service

Describes how to manage whitelist records of a VPC endpoint service to control across-account access between a VPC endpoint and a VPC endpoint service.

  • The VPC endpoint and the VPC endpoint service must be deployed in the same region.
  • Before you configure the whitelist for a VPC endpoint service, obtain the account ID of the associated VPC endpoint.

Managing Port Mappings of a VPC Endpoint Service

Describes how to view the port mapping between a VPC endpoint and a VPC endpoint service, including the supported protocol, service port, and terminal port.

  • A port mapping needs to be configured when you create a VPC endpoint service.
  • After a VPC endpoint service is created, you can view its port mappings but cannot modify them.

Managing Tags of a VPC Endpoint Service

Describes how to query, add, edit, and delete tags of a VPC endpoint service.

You can add up to 10 tags to each VPC endpoint service.