Basic Information
| Field | Details |
|---|---|
| English name | AWS Site-to-Site VPN |
| Full name | AWS Site-to-Site VPN |
| Chinese description | 站点到站点 VPN |
| Japanese description | サイト間 VPN |
| Exam frequency | ⭐⭐⭐⭐ |
| Often confused with | Client VPN / Direct Connect / PrivateLink |
In one sentence
Encrypted IPsec connectivity between an on-premises network and a VPC or Transit Gateway over the internet.
Key points
- The AWS side uses a Virtual Private Gateway or Transit Gateway; the customer side uses a Customer Gateway.
- Each VPN connection normally provides two tunnels for redundancy.
- Routing can use static routes or BGP depending on the configuration.
Exam takeaway
VPN is quicker and internet-based; Direct Connect provides dedicated connectivity and more consistent performance.