AWS VPN
- What it is
- Encrypted (IPsec) tunnels between your network and AWS, running over the public internet.
- Two products
- AWS Site-to-Site VPN — connects an entire on-premises network to a VPC. Two tunnels for redundancy.
- AWS Client VPN — managed OpenVPN-based remote access for individual users and laptops.
- Trade-offs
- Fast to set up (minutes) and inexpensive.
- Bandwidth and latency depend on the public internet — not guaranteed.
- Common hybrid pattern
- Use AWS Direct Connect as the primary path and Site-to-Site VPN as the encrypted failover.