Cloud Control API:Call the Cloud Control API over PrivateLink

Step 1: Log on to the console

1. Log on to the VPC console.

2. In the left-side navigation pane, click Endpoints.

3. On the Interface Endpoint tab, click Create Endpoint.

Step 2: Select a region

From the Region drop-down list, select one of the following regions:

• If you want to use the Cloud Control API service in China, select China (Zhangjiakou).

  

• If you want to use the Cloud Control API service outside China, select Singapore.

  

Step 3: Configure basic information

Step 4: Select an endpoint service

1. In the endpoint service search box, enter the name of the target service:

   • To use the Cloud Control API service in China: com.aliyuncs.privatelink.cn-zhangjiakou.cloudcontrol-api

   • To use the Cloud Control API service outside China: com.aliyuncs.privatelink.ap-southeast-1.cloudcontrol

2. The search returns a unique endpoint service. Select the service.

Step 5: Enable a custom domain name

Select Enable Custom Domain Name. The system automatically assigns a private domain name. No manual entry is required.

• Cloud Control API service in China: cloudcontrol.vpc-proxy.aliyuncs.com

• Cloud Control API service outside China: cloudcontrol-vpc.ap-southeast-1.aliyuncs.com

Step 6: Configure network settings

Multi-zone configuration example:

Zone A:vsw-xxxxx 
Zone B:vsw-yyyyy 

Step 7: Configure an endpoint policy

An endpoint policy controls which Alibaba Cloud accounts or Resource Access Management (RAM) users can access the service through the endpoint.

Default endpoint policy (Allow all):

{
  "Version": "1", 
  "Statement": [
    {
      "Effect": "Allow", 
      "Principal":"*", 
      "Action":"*", 
      "Resource": "*"
    }
  ]
}

Recommended policy (allow only the current account):

{
  "Version": "1", 
  "Statement": [
    {
      "Effect": "Allow", 
      "Principal":{
        "Aliyun":[
          "acs:ram::YOUR_ACCOUNT_ID:root"
        ]
      }, 
      "Action":"*", 
      "Resource":"*"
    }
  ]
}

Step 8: Create an endpoint and verify its configurations

1. Click OK to create the endpoint.

2. The endpoint status changes to Active in 2 to 5 minutes.

3. The connection status changes to Connected.

Status descriptions:

• Creating: The endpoint is being created.

• Active: The endpoint is ready to use.

• Abnormal: The creation failed or the connection is abnormal. Check your configuration.
  

Step 1: Create an endpoint in the destination region

• Create an endpoint in cn-zhangjiakou or ap-southeast-1. For more information, see the "Same region configuration" section in this topic.

• Take note of the ID of the VPC where the endpoint is located.

Step 2: Create a CEN instance to connect the regions

For more information about how to configure CEN, see Connect VPCs in different regions.

Java example

import com.aliyun.cloudcontrol20220830.Client;
import com.aliyun.teaopenapi.models.Config;

public class PrivateLinkExample {
    public static void main(String[] args) throws Exception {
        // Configure the client.
        Config config = new Config()
            .setAccessKeyId("<YOUR-ACCESS-KEY-ID>")
            .setAccessKeySecret("<YOUR-ACCESS-KEY-SECRET>")
            // Use the private domain name.
            . setEndpoint("cloudcontrol.vpc-proxy.aliyuncs.com") // For Cloud Control API service in China
            . setHost("cloudcontrol.aliyuncs.com") // For Cloud Control API service in China
            // .setEndpoint("cloudcontrol-vpc.ap-southeast-1.aliyuncs.com") // For Cloud Control API service Outside China
            .setProtocol("https");
        
        Client client = new Client(config);
        
        // Use the client object for API calls
        try {
            var response = client.listResources(...);
            System.out.println("Request successful: " + response.getBody().getRequestId());
        } catch (Exception e) {
            System.err.println("Request failed: " + e.getMessage());
        }
    }
}