AWS Public Sector Blog
Tag: AWS Direct Connect
Add network agility and security with AWS Direct Connect MACsec encryption and AWS Support
Customers with sensitive hybrid workloads can take advantage of an additional security feature available in Amazon Web Services (AWS) Direct Connect dedicated connections: MACsec encryption (IEEE 802.1AE). In this post, we explore how Direct Connect can handle architectural changes, such as adding or isolating different networks. We also cover adding an additional account boundary for security purposes, and how customers can move their Direct Connect connection to that new account.
Simplify firewall deployments using centralized inspection architecture with Gateway Load Balancer
As government organizations transition to Amazon Web Services (AWS), they often seek to maintain operational continuity by using their existing on-premises firewall solutions. Gateway Load Balancer (GWLB) enables seamless integration of these firewall appliances into the AWS architecture, ensuring consistent security policies and minimizing disruptions. This post explores best practices for implementing GWLB to facilitate centralized traffic inspection for both east-west and north-south traffic flows.
Discover the AWS Global Cloud Infrastructure located in Canada
The Amazon Web Services (AWS) Global Cloud Infrastructure is a secure, extensive, and reliable cloud platform, offering more than 200 fully featured services from data centers globally. When you want to distribute your applications globally, closer to your end users with single-digit millisecond latency, AWS offers the cloud infrastructure you require, whenever and wherever. In this post, we examine the part of the Global Cloud Infrastructure located in Canada and discuss the architecture of its AWS network backbone connectivity.
Web filtering for education using AWS Network Firewall
Managing access to websites and safeguarding users from harmful content is a critical component of a layered cybersecurity approach, especially in educational settings. Schools and institutions of higher learning have a responsibility to provide a secure online experience for their students and staff. Traditionally, this has been accomplished through on-site web filtering appliances. Amazon Web Services ( AWS) Network Firewall allows customers to filter their outbound web traffic from on-premises environments based on fully qualified domain names (FQDN) or Server Name Indication (SNI) for encrypted traffic. This post will use AWS Client VPN to demonstrate routing and filtering traffic from external resources through Network Firewall.
Connectivity patterns between AWS GovCloud (US) and AWS commercial partition
AWS GovCloud (US) was architected to have isolation (both physically and logically) from other AWS partitions for compliance. For this reason, AWS services, used to privately interconnect virtual private cloud (VPC) hosted resources within the same partition like AWS PrivateLink, Amazon Virtual Private Cloud (Amazon VPC) peering, or AWS Transit Gateway peering, cannot span from AWS GovCloud (US) to commercial Regions natively by design. In this post, we will highlight four connectivity patterns customers can use to interconnect VPC hosted systems cross partition.
How the City of Canton worked with Wi-Fiber to build a safer and more connected community
In 2020, the City of Canton, Ohio set out to build a better, safer, and more connected community. The city worked with government technology (GovTech) company Wi-Fiber, a network infrastructure provider using AWS Direct Connect. Wi-Fiber combined the City of Canton’s wireless hardware, existing copper, and fiber, where available, to connect hundreds of installed devices alongside roadways, intersections, and buildings. In two years, Canton successfully intertwined its legacy infrastructure with Wi-Fiber’s technology to maximize efficacy and minimize cost.
How AWS is supporting nonprofits, governments, and communities impacted by Hurricane Ian
On September 28, 2022, Hurricane Ian made landfall in Southwest Florida. At the request of standby organizations Help.NGO and Information Technology Disaster Resource Center (ITDRC), the AWS Disaster Preparedness and Response team assisted with response operations across a variety of functions in the aftermath of Hurricane Ian.
Hybrid connectivity to AWS GovCloud (US) and commercial Regions using AWS Direct Connect
To establish network connectivity between on-premises data centers, branch locations, and cloud resources, organizations use a hybrid network. This technical walkthrough explains how to implement hybrid connectivity from your premises to AWS GovCloud (US) and commercial AWS Regions using a dedicated private network connection provided by AWS Direct Connect (DX).
An introduction to AWS for research IT: Getting started in the cloud
The cloud can help researchers process complex workloads, store and analyze enormous amounts of data, collaborate globally, and accelerate research and innovation. For research IT, Amazon Web Services (AWS) can help build scalable, cost-effective, and flexible environments while still maintaining the governance and guardrails for security and compliance. Following best practices, AWS allows for centralized management of resources, improved security and compliance of research workloads, and can save costs and accelerate innovation. What are some common questions from research IT customers?
Himawari-8: Enabling access to key weather data
Last December, AWS announced the expansion of its collaboration with the U.S. NOAA to make environmental data easier to access and use through the Big Data Program. Users can now access new, authoritative NOAA data on AWS without needing to download and store their own copies. Researchers and entrepreneurs can deploy compute resources on-demand in the cloud, perform analysis quickly and efficiently, and save costs by letting researchers ask more questions and experiment more easily. One of the foundational datasets now available on AWS through this collaboration is Himawari-8, the Japan Meteorological Agency’s satellite dataset.