AWS Certified Solutions Architect - Professional
  • AWS Certified Solutions Architect - Professional
  • Accounts & Permissions
    • AWS Organizations
    • Service Control Policies
    • Security Token Service
    • Permissions Boundaries
    • Permissions Evaluation
    • AWS Resource Access Manager
    • Service Quotas
  • ADVANCED IDENTITIES & FEDERATION
    • SAML2.0 Identity Federation
    • IAM Identity Center
    • Amazon Cognito
    • Amazon Workspaces
    • Directory Service
    • AWS Control Tower
  • NETWORKING & HYBRID
    • Private and Public AWS Services
    • DHCP In a VPC
    • VPC Router
    • Stateful vs Stateless Firewalls
    • Network Access Control Lists
    • Security Groups
    • AWS Local Zones
    • Border Gateway Protocol
    • AWS Global Accelerator
    • IPSec VPN
    • Site2Site VPN
    • Transit Gateway
    • VPC Routing
    • Accelerated Site-to-Site VPN
    • AWS Client VPN
Powered by GitBook
On this page
  1. NETWORKING & HYBRID

Site2Site VPN

Last updated 4 hours ago

  • A hardware VPN solution that creates a highly available IPsec VPN connection.

  • Connects your AWS environment to your on-premises network (or another cloud network).

⚙️ Key Features

  • Quick to set up — much faster than Direct Connect.

  • Encrypts data in transit using IPsec protocols.

  • Highly available — two VPN tunnels are automatically created for redundancy.

  • Does not provide the same consistent high performance as Direct Connect.

🧠 Quick Summary

Feature
Description

Type

Hardware-based IPsec VPN

Purpose

Connect AWS VPC to external networks (e.g., on-premises)

Setup Time

Fast and easy

Data Security

Encrypted with IPsec

Performance

Good, but not as high or consistent as AWS Direct Connect

Availability

Two tunnels for redundancy and high availability