Peering

AWS Blogs - Designing private network connectivity between AWS and Microsoft Azure

• AWS Site-to-Site VPN over the public internet.
• AWS Direct Connect and Azure ExpressRoute in customer-managed infrastructure.
• AWS Direct Connect and Azure ExpressRoute in a facility with a multicloud connectivity provider.

• In AWS:
  • Virtual private gateway, which is the router on the AWS side of the VPN tunnel.
  • Customer gateway, which is the public IP of the Azure virtual network gateway.
• In Azure:
  • Azure VPN gateway, which is used to send encrypted traffic to/from an Azure vNet over the public internet.
  • Local network gateway, which routes to a VPN endpoint in AWS. Two are required for redundancy.