AWS Transit Gateway Integrations

Amazon Web Services (AWS) is the world’s most comprehensive cloud platform, trusted by millions of customers across industries. From startups to global enterprises and government agencies, AWS provides on-demand solutions for compute, storage, networking, AI, analytics, and more. The platform empowers organizations to innovate faster, reduce costs, and scale globally with unmatched flexibility and reliability. With services like Amazon EC2 for compute, Amazon S3 for storage, SageMaker for AI/ML, and CloudFront for content delivery, AWS covers nearly every business and technical need. Its global infrastructure spans 120 availability zones across 38 regions, ensuring resilience, compliance, and security. Backed by the largest community of customers, partners, and developers, AWS continues to lead the cloud industry in innovation and operational expertise.

AWS CloudFormation is a infrastructure provisioning and management tool that provides you the ability to create resource templates that specifies a set of AWS resources to provision. The templates allow you to version control your infrastructure, and also easily replicate your infrastructure stack quickly and with repeatability. Define an Amazon Virtual Private Cloud (VPC) subnet or provisioning services like AWS OpsWorks or Amazon Elastic Container Service (ECS) with ease. Run anything from a single Amazon Elastic Compute Cloud (EC2) instance to a complex multi-region application. Automate, test, and deploy infrastructure templates with continuous integration and delivery (CI/CD) automation. AWS CloudFormation lets you model, provision, and manage AWS and third-party resources by treating infrastructure as code. Speed up cloud provisioning with infrastructure as code.

Active Directory stores information about objects on the network and makes this information easy for administrators and users to find and use. Active Directory uses a structured data store as the basis for a logical, hierarchical organization of directory information. This data store, also known as the directory, contains information about Active Directory objects. These objects typically include shared resources such as servers, volumes, printers, and the network user and computer accounts. For more information about the Active Directory data store, see Directory data store. Security is integrated with Active Directory through logon authentication and access control to objects in the directory. With a single network logon, administrators can manage directory data and organization throughout their network, and authorized network users can access resources anywhere on the network. Policy-based administration eases the management of even the most complex network.

AWS Direct Connect is a cloud service that establishes a dedicated network connection between your on-premises infrastructure and AWS, bypassing the public internet to deliver consistent, low-latency performance. This direct link enhances application performance and can reduce networking costs through lower data transfer rates. With connection speeds ranging from 50 Mbps up to 400 Gbps, AWS Direct Connect offers flexibility to meet diverse bandwidth requirements. It supports multiple encryption options, including MACsec for point-to-point encryption on higher-speed connections and AWS Site-to-Site VPN for IPsec-based security, ensuring data protection during transit. The service also features AWS Direct Connect SiteLink, enabling private, end-to-end network connections between your global offices, data centers, and colocation facilities, facilitating efficient data transfer across your network. Deployment options include dedicated connections directly from AWS.

AWS Client VPN is a fully managed remote access VPN solution used by your remote workforce to securely access resources within both AWS and your on-premises network. Fully elastic, it automatically scales up or down based on demand. When migrating applications to AWS, your users access them the same way before, during, and after the move. AWS Client VPN, including the software client, supports the OpenVPN protocol. Many organizations require multi-factor authentication and federated authentication from their VPN solution. AWS Client VPN supports these and other authentication methods. Traditional on-premises VPN services are limited by the capacity of the hardware that runs them. AWS Client VPN is a pay-as-you-go cloud VPN service that elastically scales up or down based on user demand. Unlike on-premises VPN services, AWS Client VPN allows users to connect to AWS networks using a single VPN connection.

AWS Site-to-Site VPN is a fully managed service that establishes secure connections between your on-premises networks and AWS resources using IPsec tunnels. Each VPN connection includes two tunnels, each terminating in a different availability zone, to provide increased availability to your VPC. If there's a device failure within AWS, your VPN connection automatically fails over to the second tunnel so that your access isn't interrupted. For globally distributed applications, the accelerated Site-to-Site VPN option provides even greater performance by working with AWS Global Accelerator to intelligently route your traffic to the nearest AWS network endpoint with the best performance. AWS Site-to-Site VPN supports both static and dynamic routing options, including BGP peering, to give you flexibility in your routing configuration. It also supports NAT traversal, allowing you to use private IP addresses on private networks behind routers with a single public IP address.

AWS Cloud WAN is a managed wide area network (WAN) service that simplifies the process of building, managing, and monitoring a global network connecting your data centers, branch offices, and Amazon Virtual Private Clouds (VPCs). With Cloud WAN, you can use a central dashboard to connect and manage your branch offices, data centers, VPN connections, and Software-Defined WAN (SD-WAN), as well as your Amazon VPCs and AWS Transit Gateways. It allows you to define access controls and traffic routing in a central network policy document, ensuring consistent configurations across your network. Cloud WAN supports network segmentation, enabling you to isolate sensitive traffic and apply uniform security policies across multiple locations and AWS resources. It also offers built-in automation by allowing automatic attachment of new VPCs and network connections based on tags, reducing operational overhead.

Amazon Virtual Private Cloud (Amazon VPC) is a service that lets you launch AWS resources in a logically isolated virtual network that you define. You have complete control over your virtual networking environment, including selection of your own IP address range, creation of subnets, and configuration of route tables and network gateways. You can use both IPv4 and IPv6 for most resources in your virtual private cloud, helping to ensure secure and easy access to resources and applications. As one of AWS's foundational services, Amazon VPC makes it easy to customize your VPC's network configuration. You can create a public-facing subnet for your web servers that have access to the internet. It also lets you place your backend systems, such as databases or application servers, in a private-facing subnet with no internet access.