PrivateLink supports private connections and endpoint security groups. As a result, cloud resources can access each other in a safe manner.
Access service resources in VPCs over private connections
PrivateLink allows you to specify the following server load balancer (SLB) instances as service resources for an endpoint service:
Classic Load Balancer (CLB) instances
Application Load Balancer (ALB) instances
Network Load Balancer (NLB) instances
If you specify the preceding SLB instances as service resources for an endpoint service in a virtual private cloud (VPC), you can use PrivateLink to allow another VPC to access the SLB instances in the VPC. For more information, see Specify a CLB instance as a service resource in PrivateLink, Specify an ALB instance as a service resource in PrivateLink, and Specify an NLB instance as a service resource in PrivateLink.
Block attack traffic by using endpoint security groups
Endpoint security groups can control the traffic between VPCs and endpoint elastic network interfaces (ENIs). Therefore, security groups are an important measure to isolate networks. For more information, see Manage security groups.