Networking and Content Delivery
AWS VPN and AWS Direct Connect
Hybrid connectivity choices: AWS VPN provides encrypted connectivity over the internet, while AWS Direct Connect provides a dedicated private network connection to AWS.
Key points
- Site-to-Site VPN connects a network to AWS over IPsec; Client VPN supports individual client access.
- Direct Connect provides a dedicated connection and can offer more consistent network performance.
- A VPN can be established more quickly; Direct Connect requires physical or partner connectivity.
Best-known use cases
- Extend an on-premises network to AWS over an encrypted internet connection.
- Use dedicated private connectivity for consistent hybrid network requirements.
What candidates often confuse it with
- VPN uses the internet with encryption; Direct Connect is dedicated connectivity.
- Neither service replaces VPC subnets, routes, or security controls.
Key Cloud Practitioner takeaway
Encrypted internet connection is VPN; dedicated private circuit is Direct Connect.
Related services
- Amazon VPC
Relevant exam tasks
- D3.5