In this chapter, we looked at both VPN site-to-site connectivity and Direct Connect as a means of connecting to your AWS infrastructure from your on-premises location via both public and private infrastructure. We saw that VPN connectivity uses the internet as an intermediary network to connect to your AWS infrastructure, whereas Direct Connect uses a private network that physically connects your corporate network to that of AWS within a specific region. Direct Connect generally provides a more consistent and reliable connection and offers enhanced throughput up to a speed of 10 gigabit Ethernet.
When using either option, consideration needs to be given to your routing configuration, security groups, and access policies. This chapter was designed to cover some of these points; however, for greater in-depth configuration of some of the routing protocols, such as BGP, please refer to the AWS documentation.
In the next chapter, I will be focusing on how AWS allows you to implement...
