diff --git a/media/tidb-cloud-lake/create-endpoint-2.png b/media/tidb-cloud-lake/create-endpoint-2.png
new file mode 100644
index 0000000000000..c1fec79035bd5
Binary files /dev/null and b/media/tidb-cloud-lake/create-endpoint-2.png differ
diff --git a/tidb-cloud-lake/guides/connect-with-aws-privatelink.md b/tidb-cloud-lake/guides/connect-with-aws-privatelink.md
index 98fc6ba13ac25..af22a9d2d294f 100644
--- a/tidb-cloud-lake/guides/connect-with-aws-privatelink.md
+++ b/tidb-cloud-lake/guides/connect-with-aws-privatelink.md
@@ -40,6 +40,8 @@ Grab the PrivateLink service name from the **Connect to {{{ .lake }}}** dialog,
 
    ![Create Endpoint Button](/media/tidb-cloud-lake/create-endpoint-1.png)
 
+   ![Create Endpoint Sheet](/media/tidb-cloud-lake/create-endpoint-2.png)
+
    Select the previously created security group `HTTPS`:
 
    ![Create Endpoint SG](/media/tidb-cloud-lake/create-endpoint-3.png)