AWS Site-to-Site VPN

AWSNetworking

Managed IPsec VPN connections between on-premises networks or branch offices and VPCs or Transit Gateway, with two tunnels per connection, BGP or static routing, and accelerated VPN via Global Accelerator.

Jurisdictional exposure

Provider HQ
USSeattle, USA

Subject to CLOUD Act, FISA-702, DPF

Region locations
APACCNEEAEUUKUSOther39 regions across 7 jurisdictions
Sovereign option
Yes — 5 sovereign-flagged regions available

Sub-services (4)

Virtual private gateway

VPN termination point attached to a single VPC

Transit Gateway VPN attachment

Terminates VPN connections on Transit Gateway for multi-VPC routing

Accelerated Site-to-Site VPN

Routes tunnel traffic over the AWS Global Accelerator network

VPN CloudHub

Hub-and-spoke connectivity between multiple remote sites via a VGW

Compliance & Certifications

This service is attested for the following frameworks. Always verify with the provider before relying on a specific compliance posture.

Where this runs

39 regions
28 countries
5sovereign
Sovereign regions (5)
  • AWS European Sovereign Cloud (Germany) · BrandenburgAWS European Sovereign Cloud
  • AWS GovCloud (US-East) · AshburnAWS GovCloud (US)
  • AWS GovCloud (US-West) · HillsboroAWS GovCloud (US)
  • China (Beijing) · BeijingAWS China (Sinnet)
  • China (Ningxia) · YinchuanAWS China (NWCD)
Commercial regions (34)

Europe (8)

  • Europe (Paris)
  • Europe (Frankfurt)
  • Europe (Ireland)
  • Europe (Milan)
  • Europe (Spain)
  • Europe (Stockholm)
  • Europe (Zurich)
  • Europe (London)

North America (7)

  • Canada West (Calgary)
  • Canada (Central)
  • Mexico (Central)
  • US East (N. Virginia)
  • US West (Oregon)
  • US East (Ohio)
  • US West (N. California)

South America (1)

  • South America (São Paulo)

Asia (11)

  • Asia Pacific (Hong Kong)
  • Asia Pacific (Hyderabad)
  • Asia Pacific (Mumbai)
  • Asia Pacific (Jakarta)
  • Asia Pacific (Osaka)
  • Asia Pacific (Tokyo)
  • Asia Pacific (Malaysia)
  • Asia Pacific (Singapore)
  • Asia Pacific (Seoul)
  • Asia Pacific (Taipei)
  • Asia Pacific (Thailand)

Oceania (3)

  • Asia Pacific (Melbourne)
  • Asia Pacific (Sydney)
  • Asia Pacific (New Zealand)

Middle East (3)

  • Middle East (Bahrain)
  • Israel (Tel Aviv)
  • Middle East (UAE)

Africa (1)

  • Africa (Cape Town)

Tags

Equivalent services on other platforms

Azure VPN GatewayAzure

Managed IPsec / OpenVPN site-to-site and point-to-site VPN termination for Azure virtual networks — active-active HA pairs, BGP, and AAD-integrated point-to-site clients

Catalyst Cloud VPNCatalyst

Site-to-site IPsec VPN as a service connecting Catalyst Cloud private networks to on-premises or other networks. Billed hourly per VPN service (n1.vpn).

Cloud VPNGCP

Managed IPsec VPN service connecting on-prem networks or other clouds to a Google Cloud VPC, with HA VPN (99.99% SLA active-active) and Classic VPN flavours, BGP dynamic routing, and up to 3 Gbps per tunnel with aggregation for higher throughput

IBM Cloud VPCIBM

Software-defined virtual private cloud with generation-2 infrastructure, subnets, security groups, network ACLs, Transit Gateway integration, dedicated floating IPs, and isolated multi-zone regions across IBM Cloud global infrastructure

IONOS VPN GatewayIONOS

Managed site-to-site VPN gateway supporting IPsec tunnels and WireGuard peers to connect IONOS virtual data centres with on-premises networks, other clouds or other VDCs, with optional high-availability tiers offering automatic failover.

OpenStack NeutronOpenStack

Network-as-a-service component covering virtual networks, subnets, routers, floating IPs, security groups, and pluggable backends for OVS, OVN, Linux bridge, or vendor SDN integrations — equivalent to VPC / Virtual Network / VPC across the hyperscalers

OCI Site-to-Site VPNOracle

Encrypted IPSec tunnels between on-premises networks and OCI VCNs. Two redundant tunnels per connection for HA; BGP routing or static routes; integration with FastConnect for low-latency private links.

Outscale VPN ConnectionsOutscale

Managed site-to-site IPsec VPN gateway for hybrid connectivity between on-premises networks and Outscale Nets (VPCs), with high-availability dual-tunnel deployments and IKEv2 support

STACKIT VPNSTACKIT

Managed IPsec (IKEv2) site-to-site and site-to-multisite VPN tunnels between on-premises networks and a STACKIT Network Area; available via the STACKIT API since May 2026

UpCloud VPN GatewayUpCloud

Managed site-to-site IPsec VPN gateway connecting UpCloud SDN private networks to on-premises or other cloud networks

Pricing

Pricing model:pay-per-hour