If you create a VM inside the same VPC of your workspace are you able to access the workspace? Also have you granted access to all the ports as provided in docs https://docs.databricks.com/en/security/network/classic/privatelink.html#step-1-configure-aws-networ... 

We created a Windows VM inside the same VPC and we can access to the workspace. But, testing with the On-premise of our client network doesn't work.

The ports are configured as docs:

We validated for the Network ACLs and we have this configuration:

Have you created the Direct Connect set up for the on prem network:

• To establish a front-end PrivateLink connection for accessing the workspace from your on-premises network, connect your on-premises network to an AWS VPC using Direct Connect or VPN.

• Also have you checked the DNS set up for Private Link: https://docs.databricks.com/en/security/network/classic/privatelink.html#step-5-configure-internal-d... 

We created a record A on AWS Route53 an the redirection works, However, now we have a warning due to SSL certificates. We configure as follows:

Aditionally, How we can register a CNAME using the cloud.databricks.com domain?

According to the docs we must setup as follows: 

However, we only can take the hosted zone on Route53:

Thanks for your help!

Do you have capability to submit a support ticket so we can assist further on the validations?

Currently I can't make a submit of a support ticket, I trying to submit

But I can't:

Can you share your workspace id so I can do a validation?