GPL | AWS VPC Foundation & Hybrid Connectivity

GPL One Shot is a fixed-scope AWS networking foundation engagement -- everything you need to get on AWS and connect your premises before deploying any workload. Whether you're preparing to run Deadline Cloud render jobs, Breeze VDI artist workstations, a full Studio in a Box environment, or any other AWS service, One Shot delivers the VPC infrastructure that everything else builds on top of.

One engagement. Clean network. IaC delivered. Done.

WHAT WE DEPLOY

VPC Foundation: • VPC with public and private subnets across multiple availability zones • Internet Gateway and NAT Gateway configuration • Route tables, Network ACLs, and Security Groups • Route 53 private hosted zone for internal DNS • VPC Flow Logs enabled for traffic visibility • Full IaC output (CloudFormation or Terraform) -- version-controlled and repeatable

Hybrid Connectivity (scoped per engagement): • Site-to-Site VPN -- IPSec tunnel to your on-prem customer gateway with BGP or static routing • AWS Direct Connect -- private dedicated circuit configuration (circuit procurement separate) • AWS Client VPN -- per-user OpenVPN-based remote access for distributed teams • AWS Transit Gateway -- multi-VPC or multi-account hub-and-spoke connectivity

Private Data Sync (optional): • AWS DataSync -- automated, scheduled on-prem to S3 or FSx transfers over private network • AWS Storage Gateway -- NFS, SMB, or iSCSI hybrid storage bridge to S3 or FSx • Amazon FSx (Windows File Server or Lustre) with on-prem mount via VPN • Amazon S3 with VPC Gateway Endpoint -- private S3 access with no internet traversal

IAM & Security Baseline: • Account-level IAM structure with roles, policies, and least-privilege configuration • AWS CloudTrail enabled across all regions for full audit logging • AWS Security Hub baseline standards activated • MFA enforcement policy applied to root and IAM users

DEPLOYMENT APPROACH

Discovery (Day 1): GPL reviews your existing on-prem network topology, IP scheme, routing, and workload requirements. We confirm connectivity type, storage sync needs, and any compliance constraints.

Build (Days 2-5): GPL deploys the VPC foundation and hybrid connectivity in your AWS account. All resources are tagged, documented, and built from IaC templates.

Handoff (Days 5-7): GPL delivers IaC source files, architecture diagram, runbook documentation, and a live walkthrough with your team. Optional 30-day hypercare period available.

WHO IT'S FOR: • Studios and facilities standing up their first AWS environment • Productions needing a private AWS network footprint before spinning up workloads • Teams with compute or storage plans already in place who need the network foundation first • Any organization that wants to be on AWS in days with a clean, auditable starting point