AWS sap documentation change
Summary
Added documentation for AWS Direct Connect gateway connectivity option, including configuration scenarios and pricing information
Security assessment
The change adds documentation about using AWS Direct Connect gateway for private network connectivity which enhances security by avoiding public internet, but there's no evidence this addresses a specific security vulnerability. The documentation emphasizes secure connectivity methods as a feature rather than patching a security issue.
Diff
diff --git a/sap/latest/general/rise-accounts.md b/sap/latest/general/rise-accounts.md index f421d2e85..d6704e46c 100644 --- a//sap/latest/general/rise-accounts.md +++ b//sap/latest/general/rise-accounts.md @@ -5 +5 @@ -Amazon VPC peeringAWS Transit GatewayConnecting to RISE using your single AWS accountConnecting to RISE with a shared AWS Landing Zone +Amazon VPC peeringAWS Transit GatewayAWS Direct Connect gatewayConnecting to RISE using your single AWS accountConnecting to RISE with a shared AWS Landing Zone @@ -16,0 +17,2 @@ You can connect to RISE from your AWS account in the following ways. + * AWS Direct Connect gateway + @@ -60,0 +63,22 @@ For peering attachments, each Transit Gateway owner is billed hourly for the pee +## AWS Direct Connect gateway + +[AWS Direct Connect gateway](https://docs.aws.amazon.com/directconnect/latest/UserGuide/direct-connect-gateways.html) is a global service that enables you to establish private connectivity between your on-premises networks and multiple Amazon VPCs across different AWS regions. This centralized connection hub allows you to consolidate your network architecture, reduce complexity, and maintain secure, high-bandwidth connections while avoiding public internet for your mission-critical workloads. + +**AWS Direct Connect gateway in your own AWS account** + +To establish connection with AWS account managed by SAP, create AWS Direct Connect gateway that routes traffic from Private VIF to VPC Private Gateway. As AWS Direct Connect gateway resides in your AWS account, you can retain control over traffic routing. + + + +When you have a requirement for connectivity from multiple on-premise sites and/or are using multiple AWS regions for RISE with SAP (i.e. for long range DR), you can simplify the connectivity utilizing Direct Connect Gateway + + + +**AWS Direct Connect gateway in AWS account managed by SAP** + +If you do not have any requirement to own and manage an AWS account, you can request for SAP to provide the AWS Direct Connect gateway that is part of AWS Account which is managed by SAP. + + + +There is no additional charges for AWS Direct Connect gateway itself. You can find out more from the [AWS Direct Connect FAQs](https://aws.amazon.com/directconnect/faqs/#Direct_Connect_Gateway). + @@ -102 +126,6 @@ For more information see: -[AWS Site-to-Site VPN Pricing](https://aws.amazon.com/vpn/pricing/) + * [AWS Site-to-Site VPN Pricing](https://aws.amazon.com/vpn/pricing/) + + * [AWS Direct Connect Pricing](https://aws.amazon.com/directconnect/pricing/) + + * [Transit Gateway pricing](https://aws.amazon.com/transit-gateway/pricing/) + @@ -104 +132,0 @@ For more information see: -[AWS Direct Connect Pricing](https://aws.amazon.com/directconnect/pricing/) @@ -106 +133,0 @@ For more information see: -[Transit Gateway pricing](https://aws.amazon.com/transit-gateway/pricing/)