# Secure Virtual Graph Connections

**URL:** https://community.stardog.com/t/secure-virtual-graph-connections/4155
**Category:** Stardog Cloud
**Created:** [December 16, 2022, 12:13am UTC](https://community.stardog.com/t/secure-virtual-graph-connections/4155 "2022-12-16T00:13:29Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![peter\_royal](https://yyz2.discourse-cdn.com/flex030/user_avatar/community.stardog.com/peter_royal/32/1636_2.png) [@peter\_royal](https://community.stardog.com/u/peter_royal)
#### Post date: [December 16, 2022, 12:13am UTC](https://community.stardog.com/t/secure-virtual-graph-connections/4155/1 "2022-12-16T00:13:29Z")

</div>

What are the recommendations for securely exposing existing databases to a Stardog Cloud instance?

---

<div class="post-metadata">

### Author: ![PaulPlace](https://yyz2.discourse-cdn.com/flex030/user_avatar/community.stardog.com/paulplace/32/1447_2.png) [@PaulPlace](https://community.stardog.com/u/PaulPlace)
#### Post date: [December 16, 2022, 4:31pm UTC](https://community.stardog.com/t/secure-virtual-graph-connections/4155/2 "2022-12-16T16:31:37Z")

</div>

We recommend following your database vendor's security best practices. We also recommend that you create a service account user on your database that has the appropriately scoped privileges for the data you wish to access from Stardog. As an additional layer of protection, you can also use IP-whitelist the point of origin for any Stardog Cloud instance VG query, which is `produswest2-vg-egress.stardog.cloud` (44.238.183.206). This is a static IP.

For enterprise customers, we currently have a beta feature which allows Stardog Cloud Enterprise instances to access data sources over AWS PrivateLink (for those customers with VG data sources inside AWS VPCs).

---

<div class="post-metadata">

### Author: ![peter\_royal](https://yyz2.discourse-cdn.com/flex030/user_avatar/community.stardog.com/peter_royal/32/1636_2.png) [@peter\_royal](https://community.stardog.com/u/peter_royal)
#### Post date: [December 16, 2022, 4:40pm UTC](https://community.stardog.com/t/secure-virtual-graph-connections/4155/3 "2022-12-16T16:40:12Z")

</div>

Thanks @PaulPlace ! The ability to IP-whitelist is what I was hoping to hear. And also good to know about AWS PrivateLink as well. Based off of the DNS name, Stardog Cloud is in AWS' us-west-2 region?

---

<div class="post-metadata">

### Author: ![PaulPlace](https://yyz2.discourse-cdn.com/flex030/user_avatar/community.stardog.com/paulplace/32/1447_2.png) [@PaulPlace](https://community.stardog.com/u/PaulPlace)
#### Post date: [December 16, 2022, 5:50pm UTC](https://community.stardog.com/t/secure-virtual-graph-connections/4155/4 "2022-12-16T17:50:37Z")

</div>

> [@peter\_royal](#):
>
> Stardog Cloud is in AWS' us-west-2 region?

Currently, yes, although we are planning to support running Stardog Cloud instances in other regions. (In case your next questions are "when?" and "where?", the answer is that I don't have any specifics I can share at this time.)

---

<div class="post-metadata">

### Author: ![peter\_royal](https://yyz2.discourse-cdn.com/flex030/user_avatar/community.stardog.com/peter_royal/32/1636_2.png) [@peter\_royal](https://community.stardog.com/u/peter_royal)
#### Post date: [December 16, 2022, 6:01pm UTC](https://community.stardog.com/t/secure-virtual-graph-connections/4155/5 "2022-12-16T18:01:46Z")

</div>

Thanks; I'll follow up with my sales contact on that 😀
