Core concept
Site-to-Site: IPsec tunnel from your on-prem gateway to AWS Virtual Private Gateway or TGW.
Advertisement
How it works
Client VPN $0.10/hr endpoint + $0.05/hr per active connection. S2S VPN $0.05/hr per tunnel + data.
Advertisement
Trade-offs + gotchas
Client VPN: remote workers accessing AWS. S2S: office/DC connecting to AWS. Common for hybrid + backup to DX.