แก้ไข

What is an enclave endpoint?

Enclave endpoints define how workloads can be accessed from outside of an enclave boundary. When you create an enclave from Enclave-A to an endpoint in Enclave-B, the endpoint determines the destination, ports, and protocols for the connection. The enclave connection resource determines the authorized source CIDR/IP range from Enclave-A that is authorized to connect to Enclave-B.

Architecture of an enclave endpoint

Diagram showing enclave resource connections and access from another enclave and from an external resource.

Enclave endpoint rules

Enclave endpoint rules have the following three components:

  • IP Address: IP/CIDR range of an IP space within the enclave boundary
  • Ports: Ports through which network traffic is allowed to flow to the destination IP
  • Protocols: Protocols through which network traffic is allowed to flow to the destination IP

Connection Types

Enclave endpoints support two types of inbound connections:

  • From another enclave in the community
  • From a transit hub

Template

See template documentation.

  • อัปเดตล่าสุดเมื่อ