# Connect to SingleStore Helios Workspaces from Private Networks/Services via Azure Private Link

For inbound connections, you need to provide your workspace ID and Azure subscription details so that SingleStore can accept the connection request.

To set up inbound connections to SingleStore Helios using private networks/services via Azure Private Link, perform the following tasks:

1. Request an alias from SingleStore.

2. Create a private endpoint.

## Request an Alias from SingleStore

Contact [SingleStore Support](https://support.singlestore.com), and provide the following information:

* Workspace ID and name. SingleStore can only process the connection request when your workspace is in the `Active` state.
* Your Azure subscription ID and name
* Region details
* In the support ticket, specify that the request is for an inbound connection

SingleStore will provide an alias. Use this alias to create a private endpoint (as explained below).

## Create a Private Endpoint

> **📝 Note**: Your workspace and private endpoint must be in the same region.

1. On the [Azure portal](https://portal.azure.com/), select **Create a resource > Networking > Private Link > Create**.

2. Under **Private Link Center**, select **Private endpoints > Add**.

3. Under **Create a private endpoint**, on the **Basics** tab, enter or select the following information:

   * **Subscription**: Your Azure subscription.
   * **Resource group**: The resource group corresponding to your Azure subscription. It should have the same name as your Azure subscription name. Select **Create new** to create a new resource group.
   * **Name**: Name of your private endpoint service.
   * **Region**: Select a region in which you want to create the private link service.

4. On the **Resource** tab, under **Connection method**, select **Connect to an Azure resource by resource ID or alias**.

5. Under **Resource ID or alias**, enter the alias received from SingleStore support.

6. On the **Configuration** (or **Virtual Network)** tab, select the **Virtual Network** and **Subnet** where the private endpoint is created.

7. On the **Review + create** tab, review the private endpoint configuration, and select **Create**.

The private endpoint is ready to use.

> **📝 Note**: SingleStore Helios does not support Certificate Authority (CA) verification for inbound connections. For information on connecting to SingleStore Helios using SSL, refer to [Connect to SingleStore Helios using TLS/SSL](https://docs.singlestore.com/cloud/connect-to-singlestore/connect-with-mysql/connect-with-mysql-client/connect-to-singlestore-helios-using-tls-ssl.md).

## References

* [What is a private endpoint?](https://learn.microsoft.com/en-us/azure/private-link/private-endpoint-overview)
* [Create a private endpoint](https://learn.microsoft.com/en-us/azure/private-link/create-private-link-service-portal#create-private-endpoint-1)

***

Modified at: April 1, 2025

Source: [/cloud/connect-to-singlestore/private-connections/connect-to-singlestore-helios-workspaces-from-private-networks-services-via-azure-private-link/](https://docs.singlestore.com/cloud/connect-to-singlestore/private-connections/connect-to-singlestore-helios-workspaces-from-private-networks-services-via-azure-private-link/)

(An index of the documentation is available at /llms.txt)