Learn how to set up networking rules within AWS for PrivateLink.

1. Create a security group for the VPC endpoint:
   1. Open the Amazon VPC console.
   2. In the navigation pane, choose Security Groups.
   3. Select Create security group.
   4. Enter a name. For example, reltio-privatelink-sg.
   5. Enter a description.
   6. Select your VPC from the dropdown.
   7. Select Create security group.
   8. 
      
2. Configure security group rules by defining inbound and outbound rules:
   Inbound rules

   Add an inbound rule that allows HTTPS traffic from your VPC to the Reltio PrivateLink endpoint:

   Setting	Value
   Type	HTTPS
   Protocol	TCP
   Port range	443
   Source	Your VPC CIDR block (for example, 10.0.0.0/16)
   Description	Allow HTTPS traffic from VPC to Reltio PrivateLink endpoint

   Outbound rules

   Ensure outbound traffic is allowed:

   Setting	Value
   Type	All traffic
   Protocol	All
   Port range	All
   Destination	0.0.0.0/0
   Description	Allow all outbound traffic

3. Attach the security group to the VPC endpoint:
   1. In the Amazon VPC console, navigate to VPC → Endpoints.
   2. Select your Reltio PrivateLink endpoint.
   3. Open the Security groups tab.
   4. Choose Manage security groups.
   5. Select the security group you created.
   6. Choose Save changes.
      You can also use the AWS CLI:

      aws ec2 modify-vpc-endpoint \
        --vpc-endpoint-id vpce-YOUR-ENDPOINT-ID \
        --add-security-group-ids sg-YOUR-SECURITY-GROUP-ID

4. Verify network configuration:
   Test connectivity from an EC2 instance in your VPC:

   curl -v https://{environment}.reltio.com