diff --git a/fe/fe-core/src/main/java/org/apache/doris/analysis/CreateStageStmt.java b/fe/fe-core/src/main/java/org/apache/doris/analysis/CreateStageStmt.java
index c59e7f7592be7f..64c5f9e8bd98c8 100644
--- a/fe/fe-core/src/main/java/org/apache/doris/analysis/CreateStageStmt.java
+++ b/fe/fe-core/src/main/java/org/apache/doris/analysis/CreateStageStmt.java
@@ -25,6 +25,7 @@
 import org.apache.doris.cloud.proto.Cloud.StagePB;
 import org.apache.doris.cloud.proto.Cloud.StagePB.StageAccessType;
 import org.apache.doris.cloud.proto.Cloud.StagePB.StageType;
+import org.apache.doris.cloud.security.SecurityChecker;
 import org.apache.doris.cloud.storage.RemoteBase;
 import org.apache.doris.cloud.storage.RemoteBase.ObjectInfo;
 import org.apache.doris.common.AnalysisException;
@@ -135,6 +136,7 @@ private void tryConnect(String endpoint) throws Exception {
             String urlStr = "http://" + endpoint;
             // TODO: Server-Side Request Forgery Check is still need?
             URL url = new URL(urlStr);
+            SecurityChecker.getInstance().startSSRFChecking(urlStr);
             connection = (HttpURLConnection) url.openConnection();
             connection.setConnectTimeout(10000);
             connection.connect();
@@ -151,6 +153,7 @@ private void tryConnect(String endpoint) throws Exception {
                     LOG.warn("Failed to disconnect connection, endpoint={}", endpoint, e);
                 }
             }
+            SecurityChecker.getInstance().stopSSRFChecking();
         }
     }