Direct Connect & Site-to-site VPN

• These are both services for connecting on-premises data centre to VPC.

• Site-to-site VPN: - Data travels over the public internet (but it is automatically encrypted). - Can be set up very quickly (can be set up in 5 minutes). - On-premises needs a customer gateway (CGW). - AWS need a virtual private gateway (VGW).

• Direct Connect: - This is a physical connection between on-premises and AWS. - Private, secure and fast. - Data travels over private network. - Takes 1 month+ to set up (so very long). - Faster but also much more expensive.