By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

Using DataSync with either Public or VPC Endpoints

0

Do VPC Endpoints offer any added security (compared with Public Endpoints) when using AWS DataSync to transfer data from on-premises to AWS storage (e.g. Amazon FSx for Windows File Server?) I believe data transfers between the on-prem DataSync agent and the AWS DataSync services are HTTPS (TLS-encrypted)?

Topics
Migration & ModernizationStorageNetworking & Content Delivery
Tags
AWS DataSyncAmazon FSx for Windows File ServerAWS PrivateLink
Language
English
Dan Adams
asked a year ago617 views
1 Answer
0

Wherever possible using VPC endpoints is always recommended approach, it is a secure way of consuming a service. relevent statements from DataSync documentation:

When you use a VPC endpoint, your DataSync agent communicates directly with AWS without crossing the public internet. Data is transferred using AWS Direct Connect or a virtual private network (VPN).

You can now deploy AWS DataSync within your Amazon Virtual Private Cloud (Amazon VPC) using VPC endpoints. With this feature, data transferred between the DataSync agent and AWS service doesn’t need to traverse the public internet or need public IP addresses, increasing the security of data as it is copied over the network. VPC endpoints for DataSync are powered by AWS PrivateLink, a highly available, scalable technology that enables you to privately connect your VPC to supported AWS services.

profile pictureAWS
EXPERT
Tushar_J
answered a year ago
  • Dan Adams
    a year ago

    Thanks for the feedback. Should I assume that encrypting data in transit using HTTPS over the public Internet offers less security?

  • Tushar_J EXPERT
    a year ago

    If there is a possibility to avoid public internet and connect via DX or VPN that is always recommended.

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content