Managing Whitelist Records of a VPC Endpoint Service

Scenarios

• If the whitelist is empty, access from a VPC endpoint in another account is not allowed.
• If an authorized account ID is already in the whitelist, you can use this account to create a VPC endpoint for connecting to the VPC endpoint service.
• If an authorized account ID is not in the whitelist, you cannot use this account to create a VPC endpoint for connecting to the VPC endpoint service.

Add a Whitelist Record

1. Log in to the management console.
2. Click in the upper left corner and select the required region and project.

3. Choose Service List > Networking > VPC Endpoint.

4. In the navigation pane on the left, choose VPC Endpoint > VPC Endpoint Services.
5. In the VPC endpoint service list, locate the target VPC endpoint service and click its name.
6. On the displayed page, select the Permission Management tab and click Add to Whitelist.
7. Enter an authorized account ID in the required format and click OK.
   Note

   • Your account is in the whitelist of your VPC endpoint service by default.
   • The authorized account ID is in the iam:domain::domain_id format.

     domain_id indicates the ID of the authorized account, for example, iam:domain::1564ec50ef2a47c791ea5536353ed4b9

   • Adding * to the whitelist means that all users can access the VPC endpoint service.

Delete a Whitelist Record

1. Log in to the management console.
2. Click in the upper left corner and select the required region and project.

3. Choose Service List > Networking > VPC Endpoint.

4. In the navigation pane on the left, choose VPC Endpoint > VPC Endpoint Services.
5. In the VPC endpoint service list, locate the target VPC endpoint service and click its name.
6. On the displayed page, select the Permission Management tab, locate the target account ID, and click Delete in the Operation column.

   To delete multiple whitelist records, select all the target account IDs and click Delete in the upper left corner.

7. Click Yes.