AWS VPC without public internet connection

[frank_vanoverloop2]

Hello,

We have done trials to deploy CAL instances on AWS - to get familiar with the process and to assess usability of these instances.

MZ-Azure is at the moment no option due to the limited offering

This was done in a standard set up, using public internet addresses to access the systems. Fine, but SAPGUI from corporate network to public internet is blocked - and of course we can ask to open ports to specific addresses/ports but, without going into detail,  this is not practical for a number of reasons. 

We want to take it a step further and use the instances from our corporate network in a flexible & secure way.

Considering our security policies I gather that the so-called AWS VPC scenario 4 (connect with hardware VPN device, no public internet connection) is the preferred option.

My question : can the CAL work in such set up and generate instances within the right VPC at AWS?

If so : do we need to follow certain steps to secure this when creating instances?

Regards

Frank

[ventsislav_ivanov2 · Accepted solution]

Hi Frank,

Yes - SAP CAL works with VPN VPCs too.

Our group is utilizing the VPN scenario extensively.

BTW: since few weeks already even the Internet facing CAL instances are deployed in VPC.

Best Regards,

Ventsislav

[frank_vanoverloop2 · Accepted solution]

Hello Ventsislav,

Thank you for the prompt confirmation of my question.

I wanted to make sure we can pursue this track.

Regards

Frank