Best way to establish a private secure connection between an Azure App Service and a AWS ECS service

user_13920537 0
Viewed 132

I have an app service (Rest API) in Azure and I am planning on hosting another service that has to be integrated with the Azure app service. Could someone please let me know the preferred way(s) to make sure the communication is on a private secure channel?

amazon-ecs azure-web-app-service azure amazon-web-services
1 Answers

According the official Azure Docs, you have three options, I can say that the VPN option will be one of the easiest ones, but you can have problems like limited throughput, unpredictable routing via the public internet, and the cost of the AWS and Azure data transfer fees.

To understand better which option to use you can check this flow chart:

enter image description here

Option 1: Connect Azure ExpressRoute and the other cloud provider's equivalent private connection. The customer manages routing.

enter image description here

Option 2: Connect ExpressRoute and the other cloud provider's equivalent private connection. A cloud exchange provider handles routing.

enter image description here

Option 3: Use Site-to-Site VPN over the internet. For more information, see Connect on-premises networks to Azure by using Site-to-Site VPN gateways.

enter image description here

The options 1 and 2 are the best options to avoid use of the public internet, if you require an SLA, if you want predictable throughput, or need to handle data volume transfer. Consider whether to use a customer-managed routing or a cloud exchange provider if you haven't implemented ExpressRoute already.

In the AWS side, you will be able to configure your VPC, to understand how to do this check here.

For more information about these three options, check here

user_41575890
Related