Which of the following are components of an AWS Site-to-Site VPN connection? (Select TWO.)

Which of the following are components of an AWS Site-to-Site VPN connection? (Select TWO.)
A . AWS Storage Gateway
B . Virtual private gateway
C . NAT gateway
D . Customer gateway
E . Internet gateway

View Answer

Answer: B, D

Explanation:

The correct answers are B and D because a virtual private gateway and a customer gateway are components of an AWS Site-to-Site VPN connection. A virtual private gateway is the AWS side of the VPN connection that attaches to the customer’s VPC. A customer gateway is the customer side of the VPN connection that resides in the customer’s network. The other options are incorrect because they are not components of an AWS Site-to-Site VPN connection. AWS Storage Gateway is a service that connects on-premises software applications with cloud-based storage. NAT gateway is a service that enables instances in a private subnet to connect to the internet or other AWS services, but prevents the internet from initiating a connection with those instances. Internet gateway is a service that enables communication between instances in a VPC and the internet.

Reference: [What is AWS Site-to-Site VPN?]