- Home
- Business VPN Software
- AWS Site-to-Site VPN
On the recordRead 9 Oct 202619 facts
AWS Site-to-Site VPN
Plans and prices
Site-to-Site VPN connection
$0.05usage-based
Standard Site-to-Site VPN connection pricing · Standard AWS data transfer charges also apply
Read 22 Sep 2026 · aws.amazon.com
5 Gbps Site-to-Site VPN connection
$0.61a month
5 Gbps connection · Available in supported AWS Regions
Read 9 Oct 2026 · aws.amazon.com
Site-to-Site VPN Concentrator
$1.95a month
$0.01/hr per Site-to-Site VPN connections per hour for sites connected via VPN Concentrator · Data transfer charges also apply
Read 9 Oct 2026 · aws.amazon.com
VPN Concentrator site connection
$0.01usage-based
Pricing for sites connected through a VPN Concentrator
Read 22 Sep 2026 · aws.amazon.com
Standard Site-to-Site VPN connection (1.25 Gbps)
$0.05usage-based
Standard bandwidth up to 1.25 Gbps · Data transfer out and public IPv4 charges may also apply
Read 9 Oct 2026 · aws.amazon.com
On the record
- Acceleration
- Accelerated Site-to-Site VPN works with AWS Global Accelerator to route traffic to a nearby AWS network endpoint; additional accelerator and data-transfer-premium charges apply.aws.amazon.com · read 9 Oct 2026
- Access model
- vpnaws.amazon.com · read 22 Sep 2026
- Admin control level
- advancedaws.amazon.com · read 22 Sep 2026
- Audit logs
- Yesaws.amazon.com · read 22 Sep 2026
- Bandwidth
- Large Bandwidth Tunnels support up to 5 Gbps per tunnel and are available for connections attached to Transit Gateway or Cloud WAN.docs.aws.amazon.com · read 9 Oct 2026
- Compliance responsibility
- AWS describes security as a shared responsibility: AWS protects its cloud infrastructure, while customers are responsible for security in the cloud.docs.aws.amazon.com · read 9 Oct 2026
- Features
- Supported features include IKEv2, NAT traversal, configurable tunnel options, CloudWatch metrics, and IPv6 support with stated gateway-specific limitations.docs.aws.amazon.com · read 9 Oct 2026
- Gateways
- Connections can use Amazon VPC or AWS Transit Gateway as the AWS-side endpoint.aws.amazon.com · read 9 Oct 2026
- Management interfaces
- Resources can be managed through the AWS Management Console, AWS CLI, AWS SDKs, or the Query API.docs.aws.amazon.com · read 9 Oct 2026
- Monitoring
- VPN logs can be published to Amazon CloudWatch Logs and include IPsec tunnel, IKE negotiation, dead peer detection, BGP status, and routing-update details.docs.aws.amazon.com · read 9 Oct 2026
- Notable limitation
- A single connection cannot carry IPv4 and IPv6 traffic simultaneously, so separate VPN connections are required for those traffic types.docs.aws.amazon.com · read 9 Oct 2026
- Purpose
- AWS Site-to-Site VPN is a fully managed service that connects a data center or branch office to AWS resources through IPsec tunnels.aws.amazon.com · read 9 Oct 2026
- Redundancy
- Each VPN connection has two tunnels that can be used simultaneously for high availability.docs.aws.amazon.com · read 9 Oct 2026
- Security
- Traffic between a VPC and an on-premises network travels over encrypted IPsec tunnels, which support AES128 or AES256 encryption and Diffie-Hellman key exchange.docs.aws.amazon.com · read 9 Oct 2026
- Security management
- The Security Rebase feature can store pre-shared keys in AWS Secrets Manager and provides an API for viewing active tunnel security parameters.docs.aws.amazon.com · read 9 Oct 2026
- Site-to-site networking
- Yesaws.amazon.com · read 22 Sep 2026
- Supported platforms
- AWS Management Console,AWS CLI,AWS APIs,physical or software customer gateway devicesaws.amazon.com · read 22 Sep 2026
- Use cases
- AWS identifies application migration and secure communication between remote locations as Site-to-Site VPN use cases.aws.amazon.com · read 9 Oct 2026
