Lab → scenario

Hybrid connectivity

Connect an on-premises datacenter to a VPC for private workloads.

Requirements

Initial connectivity

Site-to-Site VPN to Virtual Private Gateway Internet Gateway + public IPs for all servers VPC peering to the datacenter

Later dedicated path

AWS Direct Connect (+ optional VPN backup) Transit Gateway with no on-prem link CloudFront origin shield

Name resolution (optional exam angle)

Route 53 Resolver endpoints for hybrid DNS Only public Route 53 zones /etc/hosts on every instance