> For the complete documentation index, see [llms.txt](https://docs.console.zenlayer.com/welcome/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.console.zenlayer.com/welcome/cloud-networking/get-started/create-a-layer-2-connection/select-a-public-cloud-as-access-point.md).

# Select a Public Cloud as Access Point

<figure><img src="/files/Lofu0NeeaVvTjKkJ23L1" alt=""><figcaption><p>Public Cloud Connection</p></figcaption></figure>

## Procedures

1. Select your cloud provider.\
   Amazon Web Service, Tencent Cloud, Google Cloud, Alibaba Cloud, Azure Cloud, Oracle Cloud, Huawei Cloud, and BytePlus Cloud connection are supported for now. More public cloud providers will be supported soon.
2. Select a location closest to your infrastructures on the public cloud to guarantee high network performance.
3. Label your cloud connect for identification.
4. Enter your cloud account ID.
5. The system will assign a VLAN ID by default, but you can also choose your own between 2 to 3499. Data will be transmitted in the corresponding VLAN.

{% hint style="info" %} <mark style="color:blue;">**Note**</mark>

* <mark style="color:blue;">If all locations are too far away, please contact Zenlayer support to create your new cloud connect.</mark>
* <mark style="color:blue;">If your public cloud provider is not supported for now on zenConsole, please contact Zenlayer support.</mark>
* <mark style="color:blue;">For Tencent Cloud, the VLAN ID ranges from 2 to 3000.</mark>
* <mark style="color:blue;">For Huawei Cloud, the VLAN ID ranges from 2 to 3999; for BytePlus Cloud, the VLAN ID ranges from 2 to 2999.</mark>
  {% endhint %}

### Amazon Web Service

<div align="left"><figure><img src="/files/xhMQztkUSy2KjRcbS0qx" alt="" width="375"><figcaption></figcaption></figure></div>

For some locations of Amazon Web Service, you need to submit a Cloud Service Request first to activate the cloud service here.

<div align="left"><figure><img src="/files/SUF1auz9aizqC9kBDWaL" alt="" width="311"><figcaption></figcaption></figure></div>

### Tencent Cloud

<div align="left"><figure><img src="/files/IHPkNHBFlR7HW5RZf7Kg" alt="" width="375"><figcaption></figcaption></figure></div>

### Google Cloud

<div align="left"><figure><img src="/files/42EijI762Fvo8f8Lt6L6" alt="" width="375"><figcaption></figcaption></figure></div>

For Google Cloud connection, you need to provide your [**pairing key**](https://cloud.google.com/network-connectivity/docs/interconnect/concepts/terminology#pairingkey) obtained from Google Cloud first. Zenlayer will find a closest location to match according to your pairing key. Please ensure the format is correct.\
See [<mark style="color:blue;">**Validate Cloud Connection**</mark>](/welcome/cloud-networking/get-started/validate-connection-in-public-cloud.md) to know how to obtain a pairing key.

### Alibaba Cloud

<div align="left"><figure><img src="/files/ghL72v2Os7wEQTtmDXe8" alt="" width="375"><figcaption></figcaption></figure></div>

For locations of Alibaba Cloud, you need to submit a Cloud Service Request first to activate the cloud service here.

<div align="left"><figure><img src="/files/SUF1auz9aizqC9kBDWaL" alt="" width="311"><figcaption></figcaption></figure></div>

### Azure Cloud

<div align="left"><figure><img src="/files/fbznUVMa7V2J55y6IXR4" alt="" width="375"><figcaption></figcaption></figure></div>

* For Azure Cloud connection, you need to provide your **service key** obtained from Azure Cloud first.\
  A **service key** (s-key) is a standard GUID to uniquely identify an ExpressRoute circuit.\
  A circuit is uniquely identified by a standard GUID called as a **service key (s-key).** The service key is the only piece of information exchanged between Zenlayer, Microsoft Azure, and you. The s-key isn't a secret for security purposes. There's a 1:1 mapping between an ExpressRoute circuit and the s-key.\
  Zenlayer will find a closest location to match according to your service key. Please ensure the format is correct.\
  See [<mark style="color:blue;">**Validate Cloud Connection**</mark>](/welcome/cloud-networking/get-started/validate-connection-in-public-cloud.md) to know how to obtain a service key.
* For locations of Azure Cloud, you need to submit a Cloud Service Request first to activate the cloud service here.

  <div align="left"><figure><img src="/files/SUF1auz9aizqC9kBDWaL" alt="" width="311"><figcaption></figcaption></figure></div>

### Oracle Cloud

<div align="left"><figure><img src="/files/Qrc1GxN6RsGT38F0IBE5" alt="" width="375"><figcaption></figcaption></figure></div>

For Oracle Cloud connection, you need to provide the **OCID** (Oracle Cloud Identifier) of your cloud resource. The OCID is an Oracle-assigned unique ID for a cloud resource, included in the resource's information in both the Oracle Console and API.

You need to create the corresponding resource on the Oracle Cloud side first to obtain its OCID, then enter it in zenConsole. Refer to the Oracle documentation for the specific creation steps.

### Huawei Cloud

<div align="left"><figure><img src="/files/zDtH0dPgW2Pot5jQwCaI" alt="" width="375"><figcaption></figcaption></figure></div>

For Huawei Cloud connection, you need to select a location and enter your Huawei Cloud **project ID**.

### BytePlus Cloud

<div align="left"><figure><img src="/files/MyTRtgfsbQswpcnJmBUb" alt="" width="375"><figcaption></figcaption></figure></div>

For BytePlus Cloud connection, you need to select a location and enter your **international account ID**.

## What to Do Next

[**Validate your cloud connect**](/welcome/cloud-networking/get-started/validate-connection-in-public-cloud.md) on the corresponding console of your public cloud provider.