AWS drs documentation change
Summary
Updated network architecture diagrams and descriptions to change from VPN to VPC Peering for AWS Cloud to AWS Cloud scenarios.
Security assessment
The change updates the networking method from VPN to VPC Peering for intra-AWS replication. While VPC Peering has different security characteristics (e.g., it operates within AWS's network backbone without encryption by default, unlike VPN which often implies encrypted tunnels), the documentation change itself does not discuss security implications, vulnerabilities, or new security features. It is a routine update to reflect current architectural patterns.
Diff
diff --git a/drs/latest/userguide/Network-diagrams.md b/drs/latest/userguide/Network-diagrams.md index 7ee8c2904..94f891122 100644 --- a//drs/latest/userguide/Network-diagrams.md +++ b//drs/latest/userguide/Network-diagrams.md @@ -7 +7 @@ -General Architecture - On-Premises to AWSOn-Prem to AWSAWS Cloud to AWS Cloud via VPNOn-Prem to OutpostsAWS to OutpostsOn-Premises to AWS Local ZoneAWS Local Zone to RegionAWS Local Zone to AWS Local ZoneAWS Failback to On-Prem +General Architecture - On-Premises to AWSOn-Prem to AWSAWS Cloud to AWS Cloud via VPC PeeringOn-Prem to OutpostsAWS to OutpostsOn-Premises to AWS Local ZoneAWS Local Zone to RegionAWS Local Zone to AWS Local ZoneAWS Failback to On-Prem @@ -42 +42 @@ This diagram shows the network architecture of DRS protecting source servers loc -## AWS Cloud to AWS Cloud via VPN +## AWS Cloud to AWS Cloud via VPC Peering @@ -44 +44 @@ This diagram shows the network architecture of DRS protecting source servers loc -This diagram shows the network architecture of DRS protecting source servers located in an on-premises environment. Communication between the on-premise environment and DRS is performed through a VPN connection. +This diagram shows the network architecture of AWS DRS protecting source servers located in an AWS VPC. Data replication between the source VPC and the target staging area, along with communication with the AWS DRS service, flows through a VPC peering connection. @@ -46 +46 @@ This diagram shows the network architecture of DRS protecting source servers loc - + @@ -62 +62 @@ This diagram shows the network architecture of DRS protecting source servers loc -This diagram shows the network architecture of DRS protecting source servers located in an on-premises environment. The staging area is located in an AWS Region and the and recovery is in an AWS Local Zone. +This diagram shows the network architecture of DRS protecting source servers located in an on-premises environment. The staging area is located in an AWS Region and the recovery is in an AWS Local Zone. @@ -80 +80 @@ This diagram shows the network architecture of DRS protecting source servers loc -This diagram shows the network architecture of DRS performing Failback to an on-premise environment after performing a recovery into AWS. +This diagram shows the network architecture of DRS performing Failback to an on-premises environment after performing a recovery into AWS.