> ## Documentation Index
> Fetch the complete documentation index at: https://private-7c7dfe99-detect-table-modification.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# AWS PrivateLink setup to expose MSK for ClickPipes

> Setup steps to expose a private MSK via MSK multi-VPC connectivity to ClickPipes.

{frontMatter.description}

<h2 id="overview">
  Overview
</h2>

This guide will get you started with setting up a **MSK multi-VPC** to be used with [ClickPipes reverse private endpoint](/integrations/clickpipes/aws-privatelink#msk-multi-vpc).

<h2 id="requirements">
  Requirements
</h2>

Your MSK cluster VPC must be located in one of our ClickPipes regions. See [ClickPipes regions](/integrations/clickpipes/aws-privatelink#aws-privatelink-regions) for the list of supported regions.

<h2 id="enabling-multi-vpc-connectivity">
  Enabling multi-VPC connectivity
</h2>

1. Navigate to the MSK cluster.
   * Choose "Clusters" from the left navigation pane in the Amazon MSK console.
   * Select the specific MSK cluster you want to configure for multi-VPC connectivity.
2. Enable MSK multi-VPC connectivity
   * In the **Connectivity** tab, find the **Multi-VPC connectivity** section.
   * Click on **Edit**.
   * Enable the **Turn-on MSK multi-VPC connectivity** option.
   * Follow the instructions
3. Add ClickPipes account principal into a cluster’s policy
   * Navigate to the **Configuration** tab.
   * Click on **Edit** in the **Cluster policy** section.
   * Include `arn:aws:iam::072088201116:root` in the **IAM policy**. Example:
     ```json theme={null}
     {
         "Version": "2012-10-17",
         "Statement": [
             {
                 "Effect": "Allow",
                 "Principal": {
                     "AWS": [
                         "arn:aws:iam::072088201116:root"
                     ]
                 },
                 "Action": [
                     "kafka:CreateVpcConnection",
                     "kafka:GetBootstrapBrokers",
                     "kafka:DescribeCluster",
                     "kafka:DescribeClusterV2"
                 ]
             }
         ]
     }
     ```

<Tip>
  Cluster IAM policy enables ClickPipes to initiate the connection from ClickPipes to your MSK cluster.
  If you want to configure IAM authentication for your MSK cluster, please refer to the [IAM authentication documentation](/integrations/clickpipes/kafka/best-practices#iam).
</Tip>

<h2 id="creating-reverse-private-endpoint">
  Creating reverse private endpoint
</h2>

Follow reverse private endpoint creation steps in the [ClickPipes documentation](/integrations/clickpipes/aws-privatelink#creating-clickpipe).