Cianplan

Level 4: Reliability, security & cloud · L4.6 AWS architecture decisions (SAA-C03)

Connecting privately: endpoints, peering, Transit Gateway, VPN and Direct Connect

Choose gateway or interface endpoints, VPC peering or Transit Gateway, and Site-to-Site VPN or Direct Connect from a scenario's scale, cost and latency needs.

13 min · Pro

What you take away

  • Gateway endpoints reach S3 and DynamoDB through a route-table entry at no charge; interface endpoints (AWS PrivateLink) put a private network interface in your subnet for most other services, billed per hour and per GB, and they are what on-premises or peered networks use to reach S3 privately.

And 3 more inside the class, in Pro.

How the class is laid out

  1. The problem
  2. The simple version
  3. Reaching AWS services: endpoints
  4. VPC to VPC: peering or a hub
  5. To the data centre: VPN or Direct Connect
  6. The edge, and the bill
  7. Check your understanding