From the course: AWS Essential Training for Architects

Unlock this course with a free trial

Join today to access over 25,300 courses taught by industry experts.

VPN and Direct Connect

VPN and Direct Connect

When migrating workloads from on-premises environments to the AWS cloud, a key architectural decision is connectivity. How are your on-premises resources going to communicate with your AWS resources? AWS has two options to establish secure connectivity between your on-premises resources and those in the cloud. First, is AWS site-to-site VPN and the other is Direct Connect. A site-to-site VPN is a secure connection between your on-premises equipment and your VPCs. To configure the VPN connection, you will need a virtual private gateway and a customer gateway device. The virtual private gateway is the VPN concentrator or termination point on the AWS side of the VPN connection. You create this within your AWS account and attach it to a VPC. Alternatively, you can also use a transit gateway as the termination point. A transit gateway is a transit hub that you can use to interconnect your VPCs and your on-premises networks. The customer gateway device is a physical device or a software…

Contents