Configure Private Endpoints

• Access to the AWS console.
• Created an Amazon VPC in the same AWS region as the index you want to connect to. You can optionally enable DNS hostnames and resolution, if you want your VPC to automatically discover the DNS CNAME for your PrivateLink and don't want to configure a CNAME.
  • To configure the routing yourself, use one of Pinecone's DNS entry for the corresponding region:

  Index region	Pinecone DNS entry
  us-east-1 (N. Virginia)	*.private.aped-4627-b74a.pinecone.io
  us-west-2 (Oregon)	*.private.apw5-4e34-81fa.pinecone.io
  eu-west-1 (Ireland)	*.private.apu-57e2-42f6.pinecone.io
  eu-central-1 (Frankfurt)	*.private.apec-a2ee-38c6.pinecone.io
  ap-southeast-1 (Singapore)	*.private.aps-d9bb-582b.pinecone.io

• Access to the Azure portal.
• Created an Azure VNet in the same region as the index you want to connect to.
• A subnet with Private endpoint network policies set to Disabled. This is required for Azure Private Endpoints.
  • DNS resolution for private endpoints requires a manual setup step after creating the endpoint (unlike AWS, where DNS can be auto-configured). See the DNS setup note below.

  Index region	Pinecone DNS entry
  eastus2 (Virginia)	*.private.eastus2-5e25.prod-azure.pinecone.io

In the AWS console:

1. Open the Amazon VPC console.
2. In the navigation pane, click Endpoint.
3. Click Create endpoint.
4. For Service category, select Other endpoint services.
5. In Service settings, enter the Service name, based on the region your Pinecone index is in:

   Index region	Service name
   us-east-1 (N. Virginia)	com.amazonaws.vpce.us-east-1.vpce-svc-05ef6f1f0b9130b54
   us-west-2 (Oregon)	com.amazonaws.vpce.us-west-2.vpce-svc-04ecb9a0e0d5aab01
   eu-west-1 (Ireland)	com.amazonaws.vpce.eu-west-1.vpce-svc-03c6b7e17ff02a70f
   eu-central-1 (Frankfurt)	com.amazonaws.vpce.eu-central-1.vpce-svc-037997ff6b3d25e34
   ap-southeast-1 (Singapore)	com.amazonaws.vpce.ap-southeast-1.vpce-svc-0c12f00812e786068

6. Click Verify service.
7. Select the VPC to host the endpoint.
8. (Optional) In Additional settings, Enable DNS name. The enables you to access our service with the DNS name we configure. An additional CNAME record is needed if you disable this option.
9. Select the Subnets and Subnet ID for the endpoint.
10. Select the Security groups to apply to the endpoint.
11. Click Create endpoint.
12. Copy the VPC endpoint ID (e.g., vpce-XXXXXXX). This will be used to add a Private Endpoint in Pinecone.

In the Azure portal:

1. Search for Private Link and select Private Link Center.
2. In the navigation pane, click Private endpoints.
3. Click Create.
4. Select your Subscription and Resource group.
5. Enter a Name for the private endpoint and select the Region matching your Pinecone index.
6. Click Next: Resource.
7. For Connection method, select Connect to an Azure resource by resource ID or alias.
8. Enter the Resource ID or alias for Pinecone's Private Link Service, based on the region your Pinecone index is in:

   Index region	Private Link Service alias
   eastus2 (Virginia)	pinecone.bdbc7759-0243-46c1-af51-794c4602745b.eastus2.azure.privatelinkservice

9. Click Next: Virtual Network.
10. Select the Virtual network and Subnet for the private endpoint.
11. Click Next: DNS. Skip the DNS integration tab (you will configure DNS manually after setup).
12. Click Next: Tags.
13. Click Review + create, then Create.
14. Once the private endpoint is created, open it and copy the Resource ID from the Properties tab (or the Overview tab — it's the /subscriptions/…/privateEndpoints/<name> ARM ID). This will be used to add a Private Endpoint in Pinecone.

To get the private endpoint URL for an index from the Pinecone console:

1. Open the Pinecone console.
2. Select the project containing the index.
3. Select the index.
4. Copy the URL under PRIVATE ENDPOINT.

To get the private endpoint URL for an index from the API, use the describe_index operation, which returns the private endpoint URL as the private_host value:

import { Pinecone } from '@pinecone-database/pinecone';

const pc = new Pinecone({ apiKey: 'YOUR_API_KEY' });

await pc.describeIndex('docs-example');

package main

import (
    "context"
    "encoding/json"
    "fmt"
    "log"

    "github.com/pinecone-io/go-pinecone/v4/pinecone"
)

func prettifyStruct(obj interface{}) string {
    bytes, _ := json.MarshalIndent(obj, "", "  ")
    return string(bytes)
}

func main() {
    ctx := context.Background()

    pc, err := pinecone.NewClient(pinecone.NewClientParams{
        ApiKey: "YOUR_API_KEY",
    })
    if err != nil {
        log.Fatalf("Failed to create Client: %v", err)
    }

    idx, err := pc.DescribeIndex(ctx, "docs-example")
    if err != nil {
        log.Fatalf("Failed to describe index \"%v\": %v", idx.Name, err)
    } else {
        fmt.Printf("index: %v\n", prettifyStruct(idx))
    }
}

PINECONE_API_KEY="YOUR_API_KEY"

curl -i -X GET "https://api.pinecone.io/indexes/docs-example" \
    -H "Api-Key: $PINECONE_API_KEY" \
    -H "X-Pinecone-Api-Version: 2026-07"

The response includes the private endpoint URL as the private_host value:

{  name: 'docs-example',  dimension: 1536,  metric: 'cosine',  host: 'docs-example-jl7boae.svc.aped-4627-b74a.pinecone.io',  privateHost: 'docs-example-jl7boae.svc.private.aped-4627-b74a.pinecone.io',  deletionProtection: 'disabled',  tags: { environment: 'production' },  embed: undefined,  spec: {    byoc: undefined,    pod: undefined,    serverless: { cloud: 'aws', region: 'us-east-1' }  },  status: { ready: true, state: 'Ready' },  vectorType: 'dense'}

index: {  "name": "docs-example",  "dimension": 1536,  "host": "docs-example-jl7boae.svc.aped-4627-b74a.pinecone.io",  "private_host": "docs-example-jl7boae.svc.private.aped-4627-b74a.pinecone.io",  "metric": "cosine",  "deletion_protection": "disabled",  "spec": {    "serverless": {      "cloud": "aws",      "region": "us-east-1"    }  },  "status": {    "ready": true,    "state": "Ready"  },  "tags": {    "environment": "production"  }}

{  "name": "docs-example",  "host": "docs-example-jl7boae.svc.aped-4627-b74a.pinecone.io",  "private_host": "docs-example-jl7boae.svc.private.aped-4627-b74a.pinecone.io",  "status": {    "ready": true,    "state": "Ready"  },  "deployment": {    "deployment_type": "managed",    "region": "us-east-1",    "cloud": "aws",    "environment": "aped-4627-b74a"  },  "read_capacity": {    "mode": "OnDemand",    "status": {      "state": "Ready",      "current_shards": null,      "current_replicas": null    }  },  "schema": {    "fields": {      "embedding": {        "type": "dense_vector",        "description": null,        "dimension": 1536,        "metric": "cosine"      }    }  },  "tags": {    "environment": "production"  },  "deletion_protection": "disabled"}