Cloud Control API:Call the Cloud Control API through PrivateLink

Step 1: Log on to the console

1. Log on to the VPC console.

2. In the left-side navigation pane, click Endpoints.

3. On the Interface Endpoint tab, click Enable PrivateLink .

Step 2: Select a region

From the Region drop-down list, select a region:

• To access the domestic service, select China (Zhangjiakou).

• To access the international service, select Singapore.

Step 3: Configure basic information

Step 4: Select an endpoint service

1. In the Endpoint Service search box, enter the service name based on your target service:

   • Domestic service: com.aliyuncs.privatelink.cn-zhangjiakou.cloudcontrol-api

   • International service: com.aliyuncs.privatelink.ap-southeast-1.cloudcontrol

2. Select the endpoint service from the search results.

Step 5: Enable a custom domain name

Select Enable Custom Domain Name. The system automatically assigns a private domain name.

• Domestic service domain name: cloudcontrol.vpc-proxy.aliyuncs.com

• International service domain name: cloudcontrol-vpc.ap-southeast-1.aliyuncs.com

Step 6: Configure network settings

Multi-zone configuration example:

Zone A: vsw-xxxxx 
Zone B: vsw-yyyyy 

Step 7: Configure an endpoint policy

An endpoint policy defines which Alibaba Cloud accounts or RAM users can access the service through the endpoint.

Default policy (allows all):

{
  "Version": "1",
  "Statement": [
    {
      "Effect": "Allow",
      "Principal": "*",
      "Action": "*",
      "Resource": "*"
    }
  ]
}

Recommended policy (allows only the current account):

{
  "Version": "1",
  "Statement": [
    {
      "Effect": "Allow",
      "Principal": {
        "Aliyun": [
          "acs:ram::YOUR_ACCOUNT_ID:root"
        ]
      },
      "Action": "*",
      "Resource": "*"
    }
  ]
}

Step 8: Create and verify

1. Click OK to create the endpoint.

2. Wait 2 to 5 minutes for the endpoint status to become Active.

3. The connection status changes to Connected.

Status descriptions:

• Creating: The endpoint is being created.

• Active: The endpoint is ready for use.

• Abnormal : The creation failed or the connection is not working. Check your configuration.
  After the endpoint is created, verify the following on its details page: in the Basic Information section, the Status is Active and the Connection Status is Connected. In the Endpoint Service Domain Name section, confirm that the Custom Domain Name is enabled and shows the expected domain.
  
  
  
  

Step 1: Create endpoint in target region

• Create an endpoint in cn-zhangjiakou or ap-southeast-1. For instructions, see Same-region configuration.

• Record the ID of the VPC where the endpoint is located.

Step 2: Connect regions with CEN

For information about how to configure CEN, see Connect VPCs across regions.

Java example

import com.aliyun.cloudcontrol20220830.Client;
import com.aliyun.teaopenapi.models.Config;
public class PrivateLinkExample {
    public static void main(String[] args) throws Exception {
        // Configure the client.
        Config config = new Config()
            .setAccessKeyId("<YOUR-ACCESS-KEY-ID>")
            .setAccessKeySecret("<YOUR-ACCESS-KEY-SECRET>")
            // Use the private endpoint.
            // For the domestic service
            .setEndpoint("cloudcontrol.vpc-proxy.aliyuncs.com")
            .setHost("cloudcontrol.aliyuncs.com")
            // For the international service
            // .setEndpoint("cloudcontrol-vpc.ap-southeast-1.aliyuncs.com")
            .setProtocol("https");
        Client client = new Client(config);
        // Use the client object for subsequent API calls.
        try {
            var response = client.listResources(...);
            System.out.println("Request successful: " + response.getBody().getRequestId());
        } catch (Exception e) {
            System.err.println("Request failed: " + e.getMessage());
        }
    }
}