Hi @james_farrugia ,

Additionally, we are also able to invoke the API on any workspace which does not have a private link configured, irrespective of the region in which the workspace was deployed. 

Regarding your observation that you can invoke the API on any workspace without Private Link configured:

If Private Link is not configured, then the traffic is routed via the public internet, which allows cross-region access without specific network restrictions.

Have you encountered any situation where you had two workspaces with Private Link configured and were able to invoke an API call from one workspace with Private Link to the other workspace, also with Private Link enabled?

If yes, this could indicate a misconfiguration, where both Private Link and public access are enabled simultaneously on the workspace. This setup would allow API calls via the public endpoint, bypassing the restrictions intended by Private Link.

Let me know your thoughts on this or if you need further help!