Remote Access to AWS VPC Service
Question
You have a requirement of providing remote access to clients from their mobile devices and tablets.
This is to access a service from inside a VPC.
Which of the following would be part of the design?
Answers
Explanations
Click on the arrows to vote for the correct answer
A. B. C. D.Answer - B.
AWS now supports Client-to-site VPN.
Refer link: https://aws.amazon.com/about-aws/whats-new/2018/12/introducing-aws-client-vpn-to-securely-access-aws-and-on-premises-resources/
Options C and D are incorrect since these are used to connect site locations to AWS.
Option A is incorrect because this is no longer needed now.
For more information on Remote Access connectivity, one can visit the below URL.
https://docs.aws.amazon.com/aws-technical-content/latest/aws-vpc-connectivity-options/software-remote-access-vpn-internal-user.htmlOption B, an AWS Client VPN, would be the most appropriate solution for providing remote access to clients from their mobile devices and tablets to access a service from inside a VPC.
Here's why:
A. A custom VPN server hosted on an EC2 Instance: Setting up a custom VPN server on an EC2 instance requires managing and maintaining the server, which can be time-consuming and expensive. Additionally, setting up a custom VPN server may not be able to scale with the increasing number of clients, and the performance of the VPN server would depend on the instance type and configuration.
B. An AWS Client VPN: AWS Client VPN is a fully managed service that enables secure access to resources in a VPC from any device using Open VPN-based clients. It allows clients to connect to the VPC without the need to manage a custom VPN server. AWS Client VPN can handle scaling automatically to accommodate increasing client connections. This option provides the necessary flexibility, scalability, and security for clients connecting from mobile devices and tablets.
C. An AWS Managed Direct Connect connection: AWS Direct Connect provides a dedicated network connection from an on-premises environment to AWS, bypassing the internet. However, it may not be the most appropriate solution for remote access since it is designed to connect on-premises environments to AWS.
D. An AWS Managed Direct Connect gateway: AWS Direct Connect Gateway is used to connect multiple VPCs in different regions to a Direct Connect connection. It may not be the most appropriate solution for remote access since it is used for interconnecting VPCs.
In summary, option B, AWS Client VPN, is the most appropriate solution for providing remote access to clients from their mobile devices and tablets to access a service from inside a VPC.
