An on-premises environment must connect to AWS.
Compare an encrypted connection over the internet with a dedicated network connection.
Choose TWO appropriate mappings.
Site-to-Site VPN creates an encrypted tunnel over the internet, while Direct Connect provides a dedicated network connection to AWS.
Detailed explanation
Site-to-Site VPN connects an on-premises network and a VPC through encrypted tunnels.
Site-to-Site VPN connects an on-premises network and a VPC through encrypted tunnels.
S3 provides object storage and does not establish VPN tunnels.
S3 provides object storage and does not establish VPN tunnels.
Direct Connect provides a dedicated network connection from an on-premises location to AWS.
Direct Connect provides a dedicated network connection from an on-premises location to AWS.
Route 53 provides DNS and is not a dedicated network connection service.
Route 53 provides DNS and is not a dedicated network connection service.
Check official documentation
Compare the following points with the official documentation.
AWS Site-to-Site VPNとAWS Direct Connectの公式概要を確認する。
What to confirm
VPNとDirect Connectを接続方式の違いで説明できる。
Key points
- AWS Site-to-Site VPN
- AWS Direct Connect
- Encrypted tunnel
- Dedicated connection
Notes
- Environment: AWS公式ネットワークサービスの確認
- Confirm current capabilities and terminology in the official AWS documentation.
Foundation review
Connectivity trade-off
Cost, bandwidth, encryption, predictability, and redundancy help distinguish VPN from Direct Connect.
Network service boundary
Route 53 provides DNS and S3 provides storage; neither establishes the on-premises network link.