---
id: "private-link"
type: "kind"
category: "edge"
url: "https://localhost:3000/catalogue/kinds/private-link"
---

# Private endpoint

A private network address that pins a managed service into a subnet.

| | |
|---|---|
| Category | Edge |
| Properties | 6 |
| Components | 14 |
| Rules | 0 |

## Properties

| property | type | values | required | default |
|---|---|---|---|---|
| `approvalRequired` | boolean | — | no | — |
| `crossRegion` | boolean | — | no | false |
| `endpointCount` | integer | — | no | — |
| `managed` | boolean | — | no | false |
| `privateDnsIntegration` | boolean | — | no | — |
| `publicAccessDisabled` | boolean | — | no | — |

## Rules for this kind · 0

No rule selects this kind or its category.

## Components · 14

### vendor-neutral

- [Generic private endpoint](https://localhost:3000/catalogue/components/private-link.md) `private-link` — the kind itself

### alibabacloud

- [PrivateLink](https://localhost:3000/catalogue/components/alibaba-privatelink.md) `alibaba-privatelink` — 1 defaults

### aws

- [PrivateLink endpoint service](https://localhost:3000/catalogue/components/aws-privatelink-service.md) `aws-privatelink-service` — 4 defaults
- [AWS RTB Fabric gateway](https://localhost:3000/catalogue/components/aws-rtb-fabric.md) `aws-rtb-fabric` — 3 defaults
- [AWS PrivateLink VPC endpoint](https://localhost:3000/catalogue/components/aws-vpc-endpoint.md) `aws-vpc-endpoint` — 3 defaults

### azure

- [Azure Private Link](https://localhost:3000/catalogue/components/azure-private-link.md) `azure-private-link` — 4 defaults

### cloudflare

- [Cloudflare Tunnel](https://localhost:3000/catalogue/components/cloudflare-tunnel.md) `cloudflare-tunnel` — 2 defaults
- [Workers VPC](https://localhost:3000/catalogue/components/cloudflare-workers-vpc.md) `cloudflare-workers-vpc` — 2 defaults

### gcp

- [Private Service Connect](https://localhost:3000/catalogue/components/google-private-service-connect.md) `google-private-service-connect` — 3 defaults
- [Serverless VPC Access connector](https://localhost:3000/catalogue/components/google-serverless-vpc-access-connector.md) `google-serverless-vpc-access-connector` — 2 defaults

### ibm

- [Virtual Private Endpoint Gateway](https://localhost:3000/catalogue/components/ibm-virtual-endpoint-gateway.md) `ibm-virtual-endpoint-gateway` — 3 defaults

### oci

- [Private Endpoint](https://localhost:3000/catalogue/components/oci-private-endpoint.md) `oci-private-endpoint` — 5 defaults
- [Service Gateway](https://localhost:3000/catalogue/components/oci-service-gateway.md) `oci-service-gateway` — 4 defaults

### outscale

- [OUTSCALE Net access point](https://localhost:3000/catalogue/components/outscale-net-access-point.md) `outscale-net-access-point` — 4 defaults

## Source (`kind` YAML, verbatim)

```yaml
# yaml-language-server: $schema=../schema/kind.schema.json
# A relationship node: it binds a service to a subnet with a DNS zone and an approval state, which no existing kind models. publicAccessDisabled and privateDnsIntegration carry no default so exposure rules can flag an endpoint that left the public path open.
schemaVersion: "1"
type: "kind"
id: "private-link"
category: "edge"
properties:
  approvalRequired:
    type: "boolean"
  privateDnsIntegration:
    type: "boolean"
  publicAccessDisabled:
    type: "boolean"
  crossRegion:
    type: "boolean"
    default: false
  endpointCount:
    type: "integer"
  managed:
    type: "boolean"
    default: false
```

Human page: https://localhost:3000/catalogue/kinds/private-link