AWS VPN

wikipedia:AWS VPN (Dec 2018)

• https://aws.amazon.com/vpn/
• Pricing: https://aws.amazon.com/vpn/pricing/

• CLI: aws ec2 vpn commands
• AWS VPN Client for Windows, macOS and Ubuntu.

Authentication

https://docs.aws.amazon.com/vpn/latest/clientvpn-admin/client-authentication.html

• Active Directory
• Mutual authentication: certificate based
• SAML, IdP

Authorization

• TODO

Activities

• Read AWS VPN administrator guide: https://docs.aws.amazon.com/vpn/latest/clientvpn-admin/cvpn-getting-started.html
• View AWS re:Invent 2018: AWS VPN Solutions (NET304), 45 min https://www.youtube.com/watch?v=qmKkbuS9gRs
• Read How to set up IAM federation using Google Workspace

Related terms

• SAML, OpenID
• OpenVPN, Wireguard, GlobalProtect
• NAT traversal
• AWS policy: ClientVPNServiceRolePolicy
• Amazon WorkLink (Jan 2019) internal corporate access from Mobile.

See also

• AWS VPN: aws ec2 vpn, attach-vpn-gateway, associate-client-vpn-target-network, create-client-vpn-endpoint, create-client-vpn-route, create-vpn-connection-route, create-vpn-gateway, export-client-vpn-client-configuration, get-vpn-connection-device-types, terminate-client-vpn-connections, describe-vpn-connections, describe-vpn-gateways, authorize-client-vpn-ingress, authorize-security-group-egress, authorize-security-group-ingress
• AWS VPN, AWS VPN Client, aws ec2 vpn, AWS VPN Client release notes
• VPN: IPsec (Openswan), OpenVPN, Forticlient, GlobalProtect (PAN-OS), WireGuard (Linux Kernel), Tailscale, PulseSecure, WebVPN, SoftEther, ESP, IKE, AWS VPN, Zerotier, VPN client, Pritunl, GCP Cloud VPN

https://aws.amazon.com/about-aws/whats-new/2018/12/introducing-aws-client-vpn-to-securely-access-aws-and-on-premises-resources/