Configure Private Endpoints for AWS PrivateLink ↗

    import { Pinecone } from '@pinecone-database/pinecone';

    const pc = new Pinecone({ apiKey: 'YOUR_API_KEY' });

    await pc.describeIndex('docs-example');
    ```

```go
    package main

    import (
        "context"
        "encoding/json"
        "fmt"
        "log"

        "github.com/pinecone-io/go-pinecone/v4/pinecone"
    )

    func prettifyStruct(obj interface{}) string {
        bytes, _ := json.MarshalIndent(obj, "", "  ")
        return string(bytes)
    }

    func main() {
        ctx := context.Background()

        pc, err := pinecone.NewClient(pinecone.NewClientParams{
            ApiKey: "YOUR_API_KEY",
        })
        if err != nil {
            log.Fatalf("Failed to create Client: %v", err)
        }

        idx, err := pc.DescribeIndex(ctx, "docs-example")
        if err != nil {
            log.Fatalf("Failed to describe index \"%v\": %v", idx.Name, err)
        } else {
            fmt.Printf("index: %v\n", prettifyStruct(idx))
        }
    }
    ```

```bash
    PINECONE_API_KEY="YOUR_API_KEY"

    curl -i -X GET "https://api.pinecone.io/indexes/docs-example" \
        -H "Api-Key: YOUR_API_KEY" \
        -H "X-Pinecone-Api-Version: 2025-10"
    ```


The response includes the private endpoint URL as the `private_host` value:


```json
    {
      name: 'docs-example',
      dimension: 1536,
      metric: 'cosine',
      host: 'docs-example-jl7boae.svc.aped-4627-b74a.pinecone.io',
      privateHost: 'docs-example-jl7boae.svc.private.aped-4627-b74a.pinecone.io',
      deletionProtection: 'disabled',
      tags: { environment: 'production' },
      embed: undefined,
      spec: {
        byoc: undefined,
        pod: undefined,
        serverless: { cloud: 'aws', region: 'us-east-1' }
      },
      status: { ready: true, state: 'Ready' },
      vectorType: 'dense'
    }
    ```

```go
    index: {
      "name": "docs-example",
      "dimension": 1536,
      "host": "docs-example-jl7boae.svc.aped-4627-b74a.pinecone.io",
      "private_host": "docs-example-jl7boae.svc.private.aped-4627-b74a.pinecone.io",
      "metric": "cosine",
      "deletion_protection": "disabled",
      "spec": {
        "serverless": {
          "cloud": "aws",
          "region": "us-east-1"
        }
      },
      "status": {
        "ready": true,
        "state": "Ready"
      },
      "tags": {
        "environment": "production"
      }
    }
    ```

```json
    {
      "id": "025117b3-e683-423c-b2d1-6d30fbe5027f",
      "vector_type": "dense",
      "name": "docs-example",
      "metric": "cosine",
      "dimension": 1536,
      "status": {
        "ready": true,
        "state": "Ready"
      },
      "host": "docs-example-jl7boae.svc.aped-4627-b74a.pinecone.io",
      "private_host": "docs-example-jl7boae.svc.private.aped-4627-b74a.pinecone.io",
      "spec": {
        "serverless": {
          "region": "us-east-1",
          "cloud": "aws"
        }
      },
      "deletion_protection": "disabled",
      "tags": {
        "environment": "production"
      }
    ```

<span class="tab-end"></span>
<span class="tab-group-end"></span>

<span class="callout-start" data-callout-type="note"></span>
If you run data operations against an index from outside the Private Endpoint, you will get an `Unauthorized` response.
<span class="callout-end"></span>

## Manage internet access to your project

Once your Private Endpoint is configured, you can turn off internet access to your project. To enable VPC endpoint access only:

1. Open the [Pinecone console](https://app.pinecone.io/organizations/-/projects).
2. Select your project.
3. Go to **Network > Access**.
4. Turn the **VPC endpoint access only** toggle on.
 This will turn off internet access to the project. This can be turned off at any point.

 <span class="callout-start" data-callout-type="warning"></span>
This access control is set at the *project-level* and can unintentionally affect Pinecone indexes that communicate via the internet in the same project. Only indexes communicating through Private Endpoints will continue to work.
 <span class="callout-end"></span>

## Manage Private Endpoints

In addition to [creating Private Endpoints](#2-add-a-private-endpoint-in-pinecone), you can also:

* [View Private Endpoints](#view-private-endpoints)
* [Delete a Private Endpoint](#delete-a-private-endpoint)

### View Private Endpoints

To view Private Endpoints using the [Pinecone console](https://app.pinecone.io/organizations/-/projects):

1. Select your project.
2. Go to **Manage > Network**.
 A list of Private Endpoints displays with the associated **VPC ID** and **Cloud** provider.

### Delete a Private Endpoint

To delete a Private Endpoint using the [Pinecone console](https://app.pinecone.io/organizations/-/projects):

1. Select your project.
2. Go to **Manage > Network**.
3. For the Private Endpoint you want to delete, click the *...* (Actions) icon.
4. Click **Delete**.
5. Enter the endpoint name.
6. Click **Delete Endpoint**.