S3 access over VPN

0

From on-premises, if a customer wants to access S3 through their Storage Gateway over a VPN connection bypassing the S3 public endpoint, is the only option to setup a proxy server fleet on EC2 and use the S3 endpoint in the VPC? I'm looking for alternate, simpler approaches if there are any.

gefragt vor 5 Jahren1932 Aufrufe
1 Antwort
0
Akzeptierte Antwort

Gateway endpoints (S3, DynamoDB) cannot be extended outside of a VPC (https://docs.aws.amazon.com/vpc/latest/userguide/vpce-gateway.html#vpc-endpoints-limitations ).

We used to publish a design pattern that talks about using an ASG fleet of proxy servers inside the VPC to provide this connectivity, however the blog post has been removed, and the only link I can find is this one: https://d0.awsstatic.com/aws-answers/Accessing_VPC_Endpoints_from_Remote_Networks.pdf

The design pattern works and is used by lots of customers, but obviously has additional service / management costs to consider.

profile pictureAWS
EXPERTE
beantwortet vor 5 Jahren

Du bist nicht angemeldet. Anmelden um eine Antwort zu veröffentlichen.

Eine gute Antwort beantwortet die Frage klar, gibt konstruktives Feedback und fördert die berufliche Weiterentwicklung des Fragenstellers.

Richtlinien für die Beantwortung von Fragen