---
schema_version: "1"
id: c791181831ba2af2fe085a3a944a022bed6c29f3365982c536bf56cacbcf2968
title: Outbound Private Connect for Microsoft SQL
collection: tableau
version: current
locale: en-us
portal_url: https://docs.salesforce.com/tableau/current/en-us/online/private_connect_setup_aws_mssql.md
canonical_url: https://help.tableau.com/current/online/en-us/private_connect_setup_aws_mssql.htm
source_site: help.tableau.com
content_type: documentation
content_hash: 1edf63e5db9f4c64d7ec8e8672fb390dca96eaa1445828a56f5fe41548e5ece9
description: Set up a private connection for Microsoft SQL in Tableau Cloud.
---
[Skip to main content](#main-content)

# Outbound Private Connect for Microsoft SQL

> [!WARNING]
> 
> As of October 14, 2025, Data Cloud has been rebranded to Data 360. During this transition, you may see references to Data Cloud in our application and documentation. While the name is new, the functionality and content remains unchanged.

This topic covers setup information specific to the data provider. General information on setting up a private connection is in [Outbound Private Connect](https://help.tableau.com/current/online/en-us/private_connect_setup_overview.htm), and information on setting up the Tableau Cloud endpoint is in [Outbound Private Connection Set Up: Tableau Cloud](https://help.tableau.com/current/online/en-us/private_connect_setup_tableau_cloud.htm).

## Prerequisites

1. If your database is hosted in RDS: [Set up your Amazon RDS Environment](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_SettingUp.html)
2. [Create and connect to a Microsoft SQL DB instance](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_GettingStarted.CreatingConnecting.SQLServer.html)
3. [Create network load balancer to front the instance](https://docs.aws.amazon.com/elasticloadbalancing/latest/network/network-load-balancers.html). If your Tableau Cloud site and your Microsoft SQL instance are in different regions, make sure the load balancer is deployed in multiple AWS Availability Zones. If your load balancer is deployed in multiple AWS Availability Zones, enable cross-zone load balancing.
4. [Create VPC endpoint service for the network load balancer](https://docs.aws.amazon.com/vpc/latest/privatelink/create-endpoint-service.html). If your Tableau Cloud site and your Microsoft SQL instance are in different regions, make sure your Tableau Cloud site's region is in the endpoint service's Supported Regions tab.

## Tableau Cloud Information for the Data Provider

The IAM ARN needs to be added as an allowed principal on the endpoint service in AWS.

To get the IAM ARN:

1. Log in to Tableau Cloud Manager (TCM).
2. Go to Settings.
3. Select the Private Connect tab.
4. Expand IAM Regions and ARNs.
5. Find the region for your Tableau Cloud site.
6. In the Actions menu (...), select Copy IAM ARN.

After you have copied Tableau Cloud's IAM ARN, allow it as an allowed principal on the endpoint service per the instructions in [Configure an endpoint service](https://docs.aws.amazon.com/vpc/latest/privatelink/configure-endpoint-service.html#add-remove-permissions).

## Data Provider Information for Tableau Cloud

Use the AWS Management Console or AWS CLI to get the endpoint service name needed for the Tableau Cloud Create Private Connection dialog.

## Alternative Approach

As an alternative to the high level steps in the Prerequisites and subsequent sections, you can use the blog post [Enhance Agentforce data security with Private Connect for Salesforce Data Cloud and Amazon Redshift – Part 3](https://aws.amazon.com/blogs/big-data/enhance-agentforce-data-security-with-private-connect-for-salesforce-data-cloud-and-amazon-redshift-part-3/) for information on configuring a private connection between Redshift and Salesforce Data Cloud. Adjust the instructions as described below to work with Microsoft SQL and Tableau Cloud instead.

From the blog post, follow the instructions in these sections completely:

- Create a security group for the Network Load Balancer
- Create a target group
- Create a load balancer

Then, from the "Create an endpoint service" section of the blog post:

- Instead of steps 9-12, use the [Tableau Cloud Information for the Data Provider](#private-connect-info-for-data-provider) section above to get the IAM ARN.
- In step 14, use the IAM ARN in place of the Principal ID when adding allowed principals to the endpoint service.
- In step 15, note the endpoint service name.
- For step 17 and later, set up the private connection in Tableau Cloud per [Private Connection Set Up: Tableau Cloud](https://help.tableau.com/current/online/en-us/private_connect_setup_tableau_cloud.htm).