Direct Connect is provisioned in one of the accounts (Network account) How to share DX to different AWS accounts

0

Direct Connect is provisioned in one of the accounts (Network account) How to share DX to different AWS accounts

Ali Md
질문됨 일 년 전1506회 조회
2개 답변
0
수락된 답변

For most basic setup

You need to create Virtual Interface and mention other account ID in it.

Please check steps here

https://docs.aws.amazon.com/directconnect/latest/UserGuide/create-vif.html

Create a private virtual interface For Virtual interface owner, choose Another AWS account, and then enter the AWS account.

=====================

A better/alternate approach will be. Create DX Gateway in your Network Account. Created VIF on DX Gateway in your Network Account. Then attach cross account VGW with your account DX Gateway

Again use same document link as above For Gateway type, choose Direct Connect gateway.

And use below document to connect cross account VGW with this DXGateway and it can use the virtual interface to reach on prem.

https://docs.aws.amazon.com/directconnect/latest/UserGuide/multi-account-associate-vgw.html

======================

Most Advance option is using Transit Gateway. But its usually preferred if you want VPC to VPC communications as well.

This document is good for overall understanding of different options.

https://d1.awsstatic.com/architecture-diagrams/ArchitectureDiagrams/hybrid-connectivity-to-transit-gateway-ra.pdf?did=wp_card&trk=wp_card

답변함 일 년 전
profile pictureAWS
전문가
검토됨 일 년 전
  • Thanks a lot

  • Thanks Tushar for sharing the input. Can you help what are the steps in need to follow on the Router for BGP configuration on prem side.

    Currently we have a private links connected on the router and needs configuration.

0

The best way is to put Transit Gateway in place and connect all accounts to it. Then you can share Direct Connect, backup site-to-site VPNs NAT Gateways and Interface VPC Endpoints from a central account to all others.

Another option is to create a Private VIF per account in Direct Connect and associate each with a VGW (Virtual Private Gateway) in each account.

I've talked about "accounts" above but of course it's actually VPCs that you're connecting to, and you may have more than one per account.

전문가
답변함 일 년 전

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인