Skip to content

AWS Virtual Private Network

#125 · Level 4 · Operations and specialized areas · Advanced networking and hybrid

AWS Virtual Private Network (VPN) builds a secret, encrypted tunnel over the internet between an office or user and AWS. It comes in two forms: Site-to-Site VPN and Client VPN. Site-to-Site VPN joins a whole office network to an AWS VPC, using a secure set of rules called IPsec. The device on the office side is called a customer gateway, and on the AWS side there is a virtual private gateway or a Transit Gateway. Client VPN lets individual employees’ computers get into the AWS network securely.

A covered, locked pipe running over an open road — no one outside can see what passes through it.

To connect the office network and AWS securely, without laying separate cables.

Site-to-Site VPN: office ↔ AWS. Client VPN: employees getting into AWS’s internal network from home.

Azure VPN Gateway

For details and the latest information, see the official documentation: