Benchmark: BP02 Provision redundant connectivity between private networks in the cloud and on-premises environments
Description
Use multiple AWS Direct Connect (DX) connections or VPN tunnels between separately deployed private networks. Use multiple DX locations for high availability. If using multiple AWS Regions, ensure redundancy in at least two of them. You might want to evaluate AWS Marketplace appliances that terminate VPNs. If you use AWS Marketplace appliances, deploy redundant instances for high availability in different Availability Zones.
Usage
Install the mod:
mkdir dashboardscd dashboardspowerpipe mod initpowerpipe mod install github.com/turbot/steampipe-mod-aws-well-architected
Start the Powerpipe server:
steampipe service startpowerpipe server
Open http://localhost:9033 in your browser and select BP02 Provision redundant connectivity between private networks in the cloud and on-premises environments.
Run this benchmark in your terminal:
powerpipe benchmark run aws_well_architected.benchmark.well_architected_framework_rel02_bp02
Snapshot and share results via Turbot Pipes:
powerpipe benchmark run aws_well_architected.benchmark.well_architected_framework_rel02_bp02 --share
Controls
- EC2 instances should be in a VPC
- ECS cluster instances should be in a VPC
- ES domains should be in a VPC
- Lambda functions should be in a VPC
- AWS Redshift enhanced VPC routing should be enabled
- Both VPN tunnels provided by AWS Site-to-Site VPN should be in UP status