---
name: cloud-object-storage-vpe
title: Using Virtual Private Endpoints
description: IBM Cloud® Virtual Private Endpoint (VPE) for IBM Cloud® Object Storage provides connection points to IBM services on the IBM Cloudinternal network from your VPC network.
last-updated: 2025-12-02
---

> ## Documentation Index
> The table of contents for this documentation set is at https://cloud.ibm.com/docs/cloud-object-storage?format=markdown
> The index for all IBM Cloud docs is at: https://cloud.ibm.com/docs/llms.txt
> Use these files to discover more information as needed.

# Using Virtual Private Endpoints
{: #vpes}

IBM Cloud® Virtual Private Endpoint (VPE) for IBM Cloud® Object Storage provides connection points to IBM services on the IBM Cloudinternal network from your VPC network.

Virtual Private Endpoints (VPEs) are generally available in all regions.
{: .note}

## Before you begin
{: #vpes-before-begin}

- You need to have an [IBM Cloud account](https://cloud.ibm.com/registration){: .external}.
- You also need an [instance of IBM Cloud Object Storage](https://cloud.ibm.com/objectstorage/create).

## Setting up your VPE
{: #vpes-setup}

1. Create an IBM Cloud® Virtual Private Cloud to host the applications that need to access your IBM Cloud Object Storage buckets. See [Getting started with VPC](https://cloud.ibm.com/docs/vpc?topic=vpc-getting-started&format=markdown).

1. Find the [location and the corresponding direct endpoint](https://cloud.ibm.com/docs/cloud-object-storage?topic=cloud-object-storage-endpoints&format=markdown) where your bucket is located.

1. From the [IBM Cloud console](https://cloud.ibm.com/login){: external}, select the **Navigation menu** ![Navigation menu icon](../icons/icon_hamburger.svg), then click **Infrastructure** ![VPC icon](../../icons/vpc.svg) > **Network** > **Virtual private endpoint gateways**. Create a VPE for your IBM Cloud instances with the [following instructions](https://cloud.ibm.com/docs/vpc?topic=vpc-ordering-endpoint-gateway&interface=ui&format=markdown).

1. After you create your VPE, it may take a few minutes for the new VPE and DNS to complete the process and begin working for your VPC. Completion is confirmed when you see an IP address set in the [details view](https://cloud.ibm.com/docs/vpc?topic=vpc-vpe-viewing-details-of-an-endpoint-gateway&format=markdown) of the VPE.

## VPE discoverability
{: #vpes-discoverability}

Following the previous steps results in a VPE that provides access over the internal IBM Cloud® network from your VPC network to all of your buckets in a particular location.

Each access to your buckets from your IBM Cloud VPC will require authorization at the S3 API level. To further restrict this access to specific IP addresses, or ranges of IP addresses, provide the IBM Cloud VPC ID or name when configuring the context-based restrictions.
{: .important}

The [VPE details](https://cloud.ibm.com/docs/vpc?topic=vpc-vpe-viewing-details-of-an-endpoint-gateway&interface=ui&format=markdown) page provides more information, including IP address, after creation.
{: .tip}

## More resources
{: #vpes-resources}

- [About virtual private endpoint gateways](https://cloud.ibm.com/docs/vpc?topic=vpc-about-vpe&format=markdown)
- [Planning for virtual private endpoint gateways](https://cloud.ibm.com/docs/vpc?topic=vpc-planning-considerations&format=markdown)
- [Creating an endpoint gateway](https://cloud.ibm.com/docs/vpc?topic=vpc-ordering-endpoint-gateway&format=markdown)
- For further assistance, see the [FAQ for virtual private endpoints](https://cloud.ibm.com/docs/vpc?topic=vpc-faqs-vpe&format=markdown), and the `Troubleshooting VPE gateways` documentation that includes [how to fix communications issues](https://cloud.ibm.com/docs/vpc?topic=vpc-troubleshoot-cannot-communicate&format=markdown).