When do I need a private connection to my cloud?