The service can establish an encrypted site-to-site VPN connection over the public internet between the virtual network and an on-premises network.
Connectivity Options - Site-to-site VPN
CCC.VPC.CP13
Related Threats
| ID | Title | Description |
|---|---|---|
| CCC.VPC.TH09 | Compromise Propagates Over Hybrid Connections | Private connections, site-to-site VPNs, and transit hubs may be configured with routes and network rules that permit broad access between on-premises networks and the virtual network. A compromise of either side can be used to move laterally into the other, impacting the confidentiality, integrity, and availability of resources on both sides of the connection. |
| CCC.VPC.TH10 | Hybrid Connection Traffic is Unencrypted or Weakly Encrypted | Dedicated private connections may carry traffic without encryption, and VPN tunnels may be negotiated with deprecated protocol versions or weak key-exchange groups. Traffic traversing the connection can be read or modified by an entity with access to the transmission path, impacting the confidentiality and integrity of data. |
| CCC.VPC.TH14 | Network Resources are Confined to a Single Availability Zone | Subnets, NAT gateways, and VPN or private connection endpoints may be deployed in a single availability zone rather than placed across zones. A failure of that zone removes connectivity for every resource that depends on them, impacting the availability of workloads in the network. |