S3 access over VPN

Question

From on-premises, if a customer wants to access S3 through their Storage Gateway over a VPN connection bypassing the S3 public endpoint, is the only option to setup a proxy server fleet on EC2 and use the S3 endpoint in the VPC? I'm looking for alternate, simpler approaches if there are any.

Accepted Answer

Gateway endpoints (S3, DynamoDB) cannot be extended outside of a VPC (https://docs.aws.amazon.com/vpc/latest/userguide/vpce-gateway.html#vpc-endpoints-limitations ).

We used to publish a design pattern that talks about using an ASG fleet of proxy servers inside the VPC to provide this connectivity, however the blog post has been removed, and the only link I can find is this one: https://d0.awsstatic.com/aws-answers/Accessing_VPC_Endpoints_from_Remote_Networks.pdf

The design pattern works and is used by lots of customers, but obviously has additional service / management costs to consider.

S3 access over VPN

相關內容