What it does
AWS Site-to-Site VPN connects a data center or branch office to AWS VPCs or Transit Gateway through managed IPsec tunnels.
AWS Site-to-Site VPN joins networks rather than enrolling individual employee devices. The service creates two tunnels per connection for redundancy and integrates connection monitoring with CloudWatch. That matters when the desired connection is between a branch gateway and AWS infrastructure. Begin with the customer-side gateway and routing design. The Accelerated option changes how traffic reaches AWS's edge, while AWS Client VPN is a separate remote-user service with a different deployment model.
Strengths
- Two tunnels per connection
- CloudWatch monitoring integration
Best for
- Organizations connecting branch networks or data centers to AWS
Sources
- AWS Site-to-Site VPN | Cloud VPN | Amazon Web Services (AWS) (Oct 26, 2026)