--- title: "Introduction to AWS and Azure PrivateLink Services" slug: "introduction-to-aws-and-azure-privatelink-services" updated: 2026-09-21T18:17:29Z published: 2026-09-21T18:17:29Z canonical: "docs.unqork.io/introduction-to-aws-and-azure-privatelink-services" --- > ## Documentation Index > Fetch the complete documentation index at: https://docs.unqork.io/llms.txt > Use this file to discover all available pages before exploring further. # Introduction to AWS and Azure PrivateLink Services PrivateLink provides a secure communication method between Unqork and an organization's resources by keeping traffic on a private network. Unqork integrates with two PrivateLink services: AWS PrivateLink and Azure Private Link. While both services perform the same function, they use different terminology and technology to do so. > [!NOTE] > For simplicity, AWS PrivateLink and Azure Private Link are referred to as PrivateLink in this article. ## Benefits of AWS and Azure PrivateLink AWS and Azure PrivateLink offer the following benefits: - **Enhanced Security**: Removes attack vectors to the public internet by eliminating public endpoints to services. - **Private Cloud Connectivity**: Provides a secure communication method between Unqork and an organization's resources by preventing traffic from leaving the private network. - **Improved** Application **Performance**: Keeps communication in the same region and the cloud provider's private network. ## Differences and Similarities Between AWS and Azure PrivateLink Patterns AWS and Azure PrivateLink both establish private connections between an organization's resources and cloud services. The patterns each service uses are similar, but the underlying technology differs. Each service uses unique methods and terminology to achieve the same result. The table below maps equivalent AWS and Azure terminology. | Amazon Web Services Terminology | Azure Terminology | Description | | --- | --- | --- | | [AWS PrivateLink](https://docs.aws.amazon.com/whitepapers/latest/aws-vpc-connectivity-options/aws-privatelink.html) | [Azure Private Link](https://azure.microsoft.com/en-us/products/private-link/) | Establishes private, stable, and secure connections between VPCs (virtual private clouds) and Unqork services. | | [VPC Endpoint Policy](https://docs.aws.amazon.com/vpc/latest/privatelink/concepts.html#concepts-endpoint-policies) | [Service Endpoint Policy](https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-service-endpoint-policies-overview) | Dictates endpoint permissions for a service's API calls. | | [ENI (Elastic Network Interface)](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-eni.html) | [Private Endpoint](https://learn.microsoft.com/en-us/azure/private-link/private-endpoint-overview) | A network interface that uses a private IP address from the virtual network to connect to AWS or Azure. | | [NLB (Network Load Balancer)](https://docs.aws.amazon.com/elasticloadbalancing/latest/network/introduction.html) | [Load Balancer](https://learn.microsoft.com/en-us/azure/load-balancer/load-balancer-overview) | Distributes incoming network traffic across multiple targets. Monitors target health and routes traffic to healthy targets only. | | [VPC (Virtual Private Cloud) Peering](https://aws.amazon.com/vpc/) | [VNet (Virtual Network) Peering](https://learn.microsoft.com/en-us/azure/virtual-network/virtual-networks-overview) | A private network that provides access to AWS or Azure resources. | | [Direct Connect](https://aws.amazon.com/directconnect/) | [ExpressRoute](https://azure.microsoft.com/en-us/products/expressroute/) | Creates private connections between AWS or Azure data centers and corporate data centers. | ### AWS and Azure PrivateLink Patterns AWS and Azure PrivateLink patterns are used when private connections are required for Unqork to consume a private service without a public interface. **AWS PrivateLink**: ![AWS PrivateLink pattern: a private connection between a customer VPC and Unqork services using an Elastic Network Interface and Network Load Balancer.](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/api_upload_20260921_174844_ec3f5aaafd5f4d4383271f8a608afb61.jpg?sv=2026-02-06&spr=https&st=2026-11-08T03%3A53%3A25Z&se=2026-11-08T04%3A53%3A25Z&sr=c&sp=r&sig=fWhYalXXtBpbLpyHtvkcJaIbkIvr9UJGUE1N%2F3gmq84%3D) **Azure PrivateLink**: ![Azure Private Link pattern: a private connection between a customer virtual network and Unqork services using a Private Endpoint and Standard Load Balancer.](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/api_upload_20260921_174844_29a2b85715d4417a8ae203456acff765.jpg?sv=2026-02-06&spr=https&st=2026-11-08T03%3A53%3A25Z&se=2026-11-08T04%3A53%3A25Z&sr=c&sp=r&sig=fWhYalXXtBpbLpyHtvkcJaIbkIvr9UJGUE1N%2F3gmq84%3D) ### AWS VPC and Azure VNet PrivateLink Patterns The AWS VPC and Azure patterns extend PrivateLink to let Unqork consume a private service in a different region. Use peering when capacity limits or regional constraints prevent alignment on a single region footprint. **AWS PrivateLink with VPC Peering**: ![AWS PrivateLink with VPC Peering: extends private connectivity across regions using VPC Peering alongside the standard PrivateLink pattern.](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/api_upload_20260921_174844_863c9438a1c442518714a26bbb6e3b59.jpg?sv=2026-02-06&spr=https&st=2026-11-08T03%3A53%3A25Z&se=2026-11-08T04%3A53%3A25Z&sr=c&sp=r&sig=fWhYalXXtBpbLpyHtvkcJaIbkIvr9UJGUE1N%2F3gmq84%3D) **Azure PrivateLink with VNet**: ![Azure Private Link with VNet Peering: extends private connectivity across regions using Virtual Network Peering alongside the standard Private Link pattern.](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/api_upload_20260921_174844_3621eaa167f3466c9afe313ef2af25e0.jpg?sv=2026-02-06&spr=https&st=2026-11-08T03%3A53%3A25Z&se=2026-11-08T04%3A53%3A25Z&sr=c&sp=r&sig=fWhYalXXtBpbLpyHtvkcJaIbkIvr9UJGUE1N%2F3gmq84%3D) ### AWS Direct Connect and Azure ExpressRoute PrivateLink Patterns The AWS Direct Connect and Azure ExpressRoute patterns are used when Unqork must consume a service on a corporate network or data center. **AWS PrivateLink with Direct Connect**: ![AWS PrivateLink with Direct Connect: extends private connectivity to corporate data centers using AWS Direct Connect alongside the standard PrivateLink pattern.](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/api_upload_20260921_174844_246a221648974a8e95aca630010609a6.jpg?sv=2026-02-06&spr=https&st=2026-11-08T03%3A53%3A25Z&se=2026-11-08T04%3A53%3A25Z&sr=c&sp=r&sig=fWhYalXXtBpbLpyHtvkcJaIbkIvr9UJGUE1N%2F3gmq84%3D) ![Azure Private Link with ExpressRoute: extends private connectivity to corporate data centers using Azure ExpressRoute alongside the standard Private Link pattern.](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/api_upload_20260921_174844_75cd967d1dbd4230b9c7cf5c9d3fef11.jpg?sv=2026-02-06&spr=https&st=2026-11-08T03%3A53%3A25Z&se=2026-11-08T04%3A53%3A25Z&sr=c&sp=r&sig=fWhYalXXtBpbLpyHtvkcJaIbkIvr9UJGUE1N%2F3gmq84%3D) ### Combined Patterns All three patterns from each service can be combined to connect Unqork to services anywhere in the world. **AWS PrivateLink with VPC Peering and Direct Connect**: ![AWS PrivateLink combined pattern: uses VPC Peering and Direct Connect together to connect Unqork to services across regions and corporate data centers.](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/api_upload_20260921_174844_8d03296a4505417fb1b9991a3a00b274.jpg?sv=2026-02-06&spr=https&st=2026-11-08T03%3A53%3A25Z&se=2026-11-08T04%3A53%3A25Z&sr=c&sp=r&sig=fWhYalXXtBpbLpyHtvkcJaIbkIvr9UJGUE1N%2F3gmq84%3D) **Azure PrivateLink with Express Route**: ![Azure Private Link combined pattern: uses VNet Peering and ExpressRoute together to connect Unqork to services across regions and corporate data centers.](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/api_upload_20260921_174844_cf899561018947bda72575138839a311.jpg?sv=2026-02-06&spr=https&st=2026-11-08T03%3A53%3A25Z&se=2026-11-08T04%3A53%3A25Z&sr=c&sp=r&sig=fWhYalXXtBpbLpyHtvkcJaIbkIvr9UJGUE1N%2F3gmq84%3D) ## Frequently Asked Questions ### Can a single PrivateLink service cover multiple services? Yes. Multiple services can run behind a single private API gateway. This is a common pattern that reduces the number of PrivateLinks and security policies to manage. ### Can end-users initiate traffic over PrivateLink? No. End-user traffic and traffic initiated by third parties goes over the public internet. ### Are there additional hosting costs involved with PrivateLink? Yes. There are minimal costs for PrivateLink services and network data transfers. ### Are there performance limitations on connections, bandwidth, or transactions per second? Performance depends on many factors that must be tested and measured for each deployment. In general, private connections perform better than connections that traverse the public internet. ### Can existing Unqork customers use PrivateLink? Yes, though some environments might require migration to the Kubernetes-based architecture. Contact a Customer Success Manager to learn more. --- **Changelog** | Date | Change | | --- | --- | | 2026-09-21 | Imported and updated for UnqorkAI documentation. | An API endpoint is the location where an API receives requests for a specific resource on its server. It's the point of contact between an API client and an API server, and is usually a uniform resource locator (URL) that provides the location of the resource. In Unqork an application is a program used to perform specific tasks. An application can be one of two types: workflow or module. An Amazon Virtual Private Cloud (VPC) is a logically isolated section within the AWS cloud. Think of it as a private network within AWS, giving you control over how your resources connect and communicate. An API endpoint is the location where an API receives requests for a specific resource on its server. It's the point of contact between an API client and an API server, and is usually a uniform resource locator (URL) that provides the location of the resource. APIs (application programming interfaces) are a set of protocols and definitions developers use to build and integrate application software. APIs act as the connective tissue between products and services. A definition The Internet Protocol (IP) address is a unique identifier for a device or network connected to the internet.