AWS VPN NAT alternative

Question

Our standard deployment when we setup VPN with a customer require us to use NAT between our subnet and the customer’s subnet . We need to be independent regardless to the subnets that the customer use and we don’t want to extend our customer networks / subnets to our AWS Tenant Account ,therefore we will need to setup NAT between our internal network and the customer network . This appears to be not supported with AWS VPN and does not seem to be on roadmap. What are some alternatives or workaround that can be used?

Answer

Depending upon the level of connectivity required, a VPC endpoint(s) may work if you only need to expose a couple of host/services.  https://docs.aws.amazon.com/vpc/latest/privatelink/endpoint-service.html

AWS VPN NAT alternative

Contenido relevante