To further enhance security, you can now let your API Extensions connect to the services running in your own cloud through a private connection.

We recommend setting up private connectivity to other clouds for your internal APIs ensuring that only API Extension requests from commercetools can access your extension APIs.

The setup is supported for Composable Commerce Projects in the Google Cloud regions.