> ## Documentation Index
> Fetch the complete documentation index at: https://docs.cognite.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Configure Azure Private Link and CDF

> Set up Azure Private Link to access Cognite Data Fusion (CDF) over a private connection.

[Azure Private Link](https://learn.microsoft.com/en-us/azure/private-link/private-link-overview) enables you to access CDF over a **private endpoint**. Traffic between your virtual network and CDF uses the Microsoft backbone network and isn't exposed to the public internet.

Follow the steps in this article to set up a private endpoint to access the Cognite API. The steps include submitting information to Cognite to configure your CDF project(s) to reject traffic from sources other than the Private Link service.

Currently, you can only request Private Link to be enabled for **new CDF projects**, not for existing ones.

<Warning>
  Make sure that you exchange confidential information through a secret and encrypted channel, for example via [Yopass](https://yopass.cogheim.net).
</Warning>

<a id="before-you-start" />

## Before you start

To complete the configuration, you need to be a network administrator or use infrastructure-as-code automation, with permission to create Azure private endpoints.

<a id="step-1" />

## Step 1: Request a Private Link connection alias from Cognite

<Steps>
  <Step title="Contact Cognite support">
    If you have purchased Private Link, contact Cognite customer support and request a **Private Link connection alias** for your CDF projects.
  </Step>

  <Step title="Note the alias">
    Make a note of the alias you receive from Cognite. It'll look similar to this:

    `cdf-api.361db72b-......-52a2bf4c6832.westeurope.azure.privatelinkservice`
  </Step>
</Steps>

<a id="step-2" />

## Step 2: Create a private endpoint in Azure

<Steps>
  <Step title="Create a private endpoint">
    Follow the [Azure documentation](https://learn.microsoft.com/en-us/azure/private-link/create-private-endpoint-portal?tabs=dynamic-ip) to create a private endpoint.
  </Step>

  <Step title="Enter the connection alias">
    When prompted, select **Connect to an Azure resource by resource ID or alias**, and enter the **connection alias** you received from Cognite.

    <Frame>
      <img src="https://apps-cdn.cogniteapp.com/@cognite/docs-portal-images/1.0.0/images/cdf/access/connections_alias.png" alt="Connection alias" width="80%" />
    </Frame>
  </Step>

  <Step title="Enter the organization name">
    For **Request message**, enter the name of your **CDF organization**.
  </Step>

  <Step title="Complete configuration">
    Fill in the remaining information according to your organization's preferences to create the private endpoint.
  </Step>
</Steps>

<a id="step-3" />

## Step 3: Provide the private endpoint details to Cognite

Contact Cognite customer support and provide **the private endpoint details** to configure your CDF projects:

* The **Resource GUID** of the private endpoint:

<Frame>
  <img src="https://apps-cdn.cogniteapp.com/@cognite/docs-portal-images/1.0.0/images/cdf/access/resource_guid.png" alt="Resource GUID" width="80%" />
</Frame>

* The **Private IPv4 address** of the private endpoint network interface controller (NIC):

<Frame>
  <img src="https://apps-cdn.cogniteapp.com/@cognite/docs-portal-images/1.0.0/images/cdf/access/private_ipv4.png" alt="Private IPv4 address" width="80%" />
</Frame>

<a id="step-4" />

## Step 4: Receive the base URL from Cognite

<Steps>
  <Step title="Copy the base URL">
    Make a note of the **base URL** you receive from Cognite. It'll be in this format:

    `pNNN.plink.<cluster>.cognitedata.com`
  </Step>

  <Step title="Register the Cognite API and applications">
    Use the base URL to register [the Cognite API and applications](/cdf/access/entra/guides/configure_cdf_azure_oidc) and to register and configure [other applications and components](/cdf/access/entra/guides/configure_apps_oidc).
  </Step>
</Steps>