Skip to content
SPECIFICTION
Get listed

AWS Site-to-Site VPN

aws.amazon.com

From $0.01/mo WebWindowsmacOSLinuxAPI
Visit aws.amazon.com
Spec score 8.1 #40 of 94 in Business VPN Software

Spec sheet

Purpose
AWS Site-to-Site VPN is a fully managed service that connects a data center or branch office to AWS resources through IPsec tunnels.Read 9 Oct 2026 · aws.amazon.com
Free plan
NoRead 22 Sep 2026 · aws.amazon.com
Security
Traffic between a VPC and an on-premises network travels over encrypted IPsec tunnels, which support AES128 or AES256 encryption and Diffie-Hellman key exchange.Read 9 Oct 2026 · docs.aws.amazon.com
Acceleration
Accelerated Site-to-Site VPN works with AWS Global Accelerator to route traffic to a nearby AWS network endpoint; additional accelerator and data-transfer-premium charges apply.Read 9 Oct 2026 · aws.amazon.com
Access model
vpnRead 22 Sep 2026 · aws.amazon.com
Admin control level
advancedRead 22 Sep 2026 · aws.amazon.com
Audit logs
YesRead 22 Sep 2026 · aws.amazon.com
Bandwidth
Large Bandwidth Tunnels support up to 5 Gbps per tunnel and are available for connections attached to Transit Gateway or Cloud WAN.Read 9 Oct 2026 · docs.aws.amazon.com
Compliance responsibility
AWS describes security as a shared responsibility: AWS protects its cloud infrastructure, while customers are responsible for security in the cloud.Read 9 Oct 2026 · docs.aws.amazon.com
Features
Supported features include IKEv2, NAT traversal, configurable tunnel options, CloudWatch metrics, and IPv6 support with stated gateway-specific limitations.Read 9 Oct 2026 · docs.aws.amazon.com
Gateways
Connections can use Amazon VPC or AWS Transit Gateway as the AWS-side endpoint.Read 9 Oct 2026 · aws.amazon.com
Management interfaces
Resources can be managed through the AWS Management Console, AWS CLI, AWS SDKs, or the Query API.Read 9 Oct 2026 · docs.aws.amazon.com
Monitoring
VPN logs can be published to Amazon CloudWatch Logs and include IPsec tunnel, IKE negotiation, dead peer detection, BGP status, and routing-update details.Read 9 Oct 2026 · docs.aws.amazon.com
Notable limitation
A single connection cannot carry IPv4 and IPv6 traffic simultaneously, so separate VPN connections are required for those traffic types.Read 9 Oct 2026 · docs.aws.amazon.com
Redundancy
Each VPN connection has two tunnels that can be used simultaneously for high availability.Read 9 Oct 2026 · docs.aws.amazon.com
Security management
The Security Rebase feature can store pre-shared keys in AWS Secrets Manager and provides an API for viewing active tunnel security parameters.Read 9 Oct 2026 · docs.aws.amazon.com
Site-to-site networking
YesRead 22 Sep 2026 · aws.amazon.com
Supported platforms
AWS Management Console,AWS CLI,AWS APIs,physical or software customer gateway devicesRead 22 Sep 2026 · aws.amazon.com
Use cases
AWS identifies application migration and secure communication between remote locations as Site-to-Site VPN use cases.Read 9 Oct 2026 · aws.amazon.com

Plans and prices

Site-to-Site VPN connection $0.05 a month Charged for each VPN connection-hour while provisioned and available Standard Site-to-Site VPN connection pricing · Standard AWS data transfer charges also apply Read 22 Sep 2026 · aws.amazon.com
5 Gbps Site-to-Site VPN connection $0.61 a month Hourly while provisioned and available; data transfer charges also apply. 5 Gbps connection · Available in supported AWS Regions Read 9 Oct 2026 · aws.amazon.com
Site-to-Site VPN Concentrator $1.95 a month Hourly while provisioned and available; connected sites are additionally charged per connection-hour. $0.01/hr per Site-to-Site VPN connections per hour for sites connected via VPN Concentrator · Data transfer charges also apply Read 9 Oct 2026 · aws.amazon.com
VPN Concentrator site connection $0.01 a month Charged for each Site-to-Site VPN connection-hour for sites connected via VPN Concentrator Pricing for sites connected through a VPN Concentrator Read 22 Sep 2026 · aws.amazon.com
Standard Site-to-Site VPN connection (1.25 Gbps) $0.05 a month Hourly while the connection is active; AWS gives a US East (Ohio) example of $36.00 per month for 30 days of continuous use. Standard bandwidth up to 1.25 Gbps · Data transfer out and public IPv4 charges may also apply Read 9 Oct 2026 · aws.amazon.com

Every AWS Site-to-Site VPN plan and price →

Where Specifiction places it

Alternatives to AWS Site-to-Site VPNAll alternatives →