Using DataSync with either Public or VPC Endpoints

0

Do VPC Endpoints offer any added security (compared with Public Endpoints) when using AWS DataSync to transfer data from on-premises to AWS storage (e.g. Amazon FSx for Windows File Server?) I believe data transfers between the on-prem DataSync agent and the AWS DataSync services are HTTPS (TLS-encrypted)?

1개 답변
0

Wherever possible using VPC endpoints is always recommended approach, it is a secure way of consuming a service. relevent statements from DataSync documentation:

When you use a VPC endpoint, your DataSync agent communicates directly with AWS without crossing the public internet. Data is transferred using AWS Direct Connect or a virtual private network (VPN).

You can now deploy AWS DataSync within your Amazon Virtual Private Cloud (Amazon VPC) using VPC endpoints. With this feature, data transferred between the DataSync agent and AWS service doesn’t need to traverse the public internet or need public IP addresses, increasing the security of data as it is copied over the network. VPC endpoints for DataSync are powered by AWS PrivateLink, a highly available, scalable technology that enables you to privately connect your VPC to supported AWS services.

profile pictureAWS
전문가
답변함 일 년 전
  • Thanks for the feedback. Should I assume that encrypting data in transit using HTTPS over the public Internet offers less security?

  • If there is a possibility to avoid public internet and connect via DX or VPN that is always recommended.

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인