Networking and Content Delivery
CoreAWS Site-to-Site VPN
Managed encrypted IPsec connectivity between an on-premises network and AWS over the internet.
Key points
- VPN can be established faster and with lower entry overhead than dedicated connectivity, but internet paths vary.
- Use redundant tunnels and customer-side devices/paths according to the required link failure boundary.
- It can back up Direct Connect or run over it for encryption in supported designs.
Best-known use cases
- Connect a data center network to a VPC quickly.
- Provide encrypted backup connectivity for a dedicated hybrid link.
What candidates often confuse it with
- Site-to-Site VPN connects networks; Client VPN connects individual remote users.
- VPN is encrypted internet transport; Direct Connect is dedicated transport and is not encrypted by default.
Key takeaway
Choose Site-to-Site VPN for encrypted network-to-network connectivity where internet-path behavior meets requirements.
Related services
- AWS Direct Connect
- AWS Transit Gateway
- Amazon VPC
Relevant exam tasks
- D1.2
- D3.4
- D4.4