AWS Security ChangesHomeSearch

AWS wellarchitected documentation change

Service: wellarchitected · 2025-11-22 · Documentation low

File: wellarchitected/2022-03-31/framework/rel_planning_network_topology_ha_conn_private_networks.md

Summary

Changed 'AWS VPN' to 'Site-to-Site VPN' terminology

Security assessment

Terminology update clarifies VPN service naming without addressing security vulnerabilities or introducing security features. Focus remains on network reliability considerations.

Diff

diff --git a/wellarchitected/2022-03-31/framework/rel_planning_network_topology_ha_conn_private_networks.md b/wellarchitected/2022-03-31/framework/rel_planning_network_topology_ha_conn_private_networks.md
index 11236273c..12da2e6a1 100644
--- a//wellarchitected/2022-03-31/framework/rel_planning_network_topology_ha_conn_private_networks.md
+++ b//wellarchitected/2022-03-31/framework/rel_planning_network_topology_ha_conn_private_networks.md
@@ -30 +30 @@ If you choose to connect your VPC to your data center using a Direct Connect con
-If you choose to fail over to VPN over the internet using AWS VPN, it’s important to understand that it supports up to 1.25-Gbps throughput per VPN tunnel, but does not support Equal Cost Multi Path (ECMP) for outbound traffic in the case of multiple AWS Managed VPN tunnels terminating on the same VGW. We do not recommend that you use AWS Managed VPN as a backup for Direct Connect connections unless you can tolerate speeds less than 1 Gbps during failover. 
+If you choose to fail over to VPN over the internet using Site-to-Site VPN, it’s important to understand that it supports up to 1.25-Gbps throughput per VPN tunnel, but does not support Equal Cost Multi Path (ECMP) for outbound traffic in the case of multiple AWS Managed VPN tunnels terminating on the same VGW. We do not recommend that you use AWS Managed VPN as a backup for Direct Connect connections unless you can tolerate speeds less than 1 Gbps during failover.