AWS Site-to-Site VPN
The facts below are what the maker publishes about AWS Site-to-Site VPN, checked and dated. Our editors have not written about it yet.
Plans and prices
From AWS Site-to-Site VPN's own pricing page, checked 22 Sep 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Site-to-Site VPN connection | $0.05 a month | Standard Site-to-Site VPN connection pricing · Standard AWS data transfer charges also apply · Charged for each VPN connection-hour while provisioned and available |
| 5 Gbps Site-to-Site VPN connection | $0.61 a month | 5 Gbps connection · Available in supported AWS Regions · Hourly while provisioned and available; data transfer charges also apply. |
| Site-to-Site VPN Concentrator | $1.95 a month | $0.01/hr per Site-to-Site VPN connections per hour for sites connected via VPN Concentrator · Data transfer charges also apply · Hourly while provisioned and available; connected sites are additionally charged per connection-hour. |
| VPN Concentrator site connection | $0.01 a month | Pricing for sites connected through a VPN Concentrator · Charged for each Site-to-Site VPN connection-hour for sites connected via VPN Concentrator |
| Standard Site-to-Site VPN connection (1.25 Gbps) | $0.05 a month | Standard bandwidth up to 1.25 Gbps · Data transfer out and public IPv4 charges may also apply · Hourly while the connection is active; AWS gives a US East (Ohio) example of $36.00 per month for 30 days of continuous use. |
The facts
Each one read from AWS Site-to-Site VPN's own pages, with the date it was checked.
What it does
- Acceleration
- Accelerated Site-to-Site VPN works with AWS Global Accelerator to route traffic to a nearby AWS network endpoint; additional accelerator and data-transfer-premium charges apply.checked 9 Oct 2026
- Access model
- vpnchecked 22 Sep 2026
- Admin control level
- advancedchecked 22 Sep 2026
- Audit logs
- Yeschecked 22 Sep 2026
- Bandwidth
- Large Bandwidth Tunnels support up to 5 Gbps per tunnel and are available for connections attached to Transit Gateway or Cloud WAN.checked 9 Oct 2026
- Compliance responsibility
- AWS describes security as a shared responsibility: AWS protects its cloud infrastructure, while customers are responsible for security in the cloud.checked 9 Oct 2026
- Features
- Supported features include IKEv2, NAT traversal, configurable tunnel options, CloudWatch metrics, and IPv6 support with stated gateway-specific limitations.checked 9 Oct 2026
- Gateways
- Connections can use Amazon VPC or AWS Transit Gateway as the AWS-side endpoint.checked 9 Oct 2026
- Management interfaces
- Resources can be managed through the AWS Management Console, AWS CLI, AWS SDKs, or the Query API.checked 9 Oct 2026
- Monitoring
- VPN logs can be published to Amazon CloudWatch Logs and include IPsec tunnel, IKE negotiation, dead peer detection, BGP status, and routing-update details.checked 9 Oct 2026
- Notable limitation
- A single connection cannot carry IPv4 and IPv6 traffic simultaneously, so separate VPN connections are required for those traffic types.checked 9 Oct 2026
- Purpose
- AWS Site-to-Site VPN is a fully managed service that connects a data center or branch office to AWS resources through IPsec tunnels.checked 9 Oct 2026
- Redundancy
- Each VPN connection has two tunnels that can be used simultaneously for high availability.checked 9 Oct 2026
- Security
- Traffic between a VPC and an on-premises network travels over encrypted IPsec tunnels, which support AES128 or AES256 encryption and Diffie-Hellman key exchange.checked 9 Oct 2026
- Security management
- The Security Rebase feature can store pre-shared keys in AWS Secrets Manager and provides an API for viewing active tunnel security parameters.checked 9 Oct 2026
- Site-to-site networking
- Yeschecked 22 Sep 2026
- Use cases
- AWS identifies application migration and secure communication between remote locations as Site-to-Site VPN use cases.checked 9 Oct 2026
Money
- Free plan
- Nochecked 22 Sep 2026
Where it runs
- Supported platforms
- AWS Management Console,AWS CLI,AWS APIs,physical or software customer gateway deviceschecked 22 Sep 2026
Alternatives to AWS Site-to-Site VPN
- 1
Tailscale
Free planOpen sourceAndroidiOSWebAPI9.4From $1 a month - 2
Windscribe
Free planOpen sourceAndroidiOSWebExtension9.1From $3 a month - 3
NetBird
Free planAndroidiOSLinuxmacOS9.0From €6 a month - 4
Twingate
Free planAndroidiOSWebAPI8.9From $5 a month - 5
GoodAccess
Free planAndroidiOSWebLinux8.8Free plan - 6
ZeroTier
Free planAndroidiOSWebAPI8.8From $18 a month