A company is planning to migrate its SAP workloads to AWS. The company will use two VPCs One VPC will be for production systems and one VPC will be for non-production systems. The company will host the non-production systems and the primary node of all the production systems in the same Availability Zone.
What is the MOST cost-effective way to establish a connection between me production systems and the non-production systems?
VPC endpoints to ensure that traffic to and from the CloudWatch and EC2 services stays within the VPC. Additionally, an IAM policy is created to grant access to only the necessary actions, such as DescribeInstances and GetMetricStatistics, for all EC2 resources. This approach will provide secure monitoring of the SAP system while maximizing security and ensuring support from both SAP and AWS.
https://docs.aws.amazon.com/sap/latest/general/data-provider-req.html#vpc-endpoints
Werner
3 days ago