[non-validated] Dual Tunnel Implementation Verification

Generated catalog draft. No operational assessment or human approval is claimed.

[non-validated] This question has unresolved selected work.

Question

[non-validated] Has the Site-to-Site VPN configuration implemented dual tunnels for high availability between cloud virtual private clouds and on-premises networks as specified in current technical documentation?

Explanation

[non-validated] Does the Site-to-Site VPN configuration implement dual tunnels for high availability between cloud virtual private clouds (VPCs) and on-premises networks, as required by current technical documentation to prevent single points of failure?

Criterion and evidence

Assess configuration documentation for VPC-to-on-premises Site-to-Site VPN connections within the current assessment period. Evidence must demonstrate two active tunnels with failover routing per AWS guidance. Missing documentation yields a pending status; single-tunnel configurations or absent redundancy measures constitute failures.

AI assistance prompt

Replace this placeholder with one clear yes/no condition within the scope of Networking and VPNs. Define the evidence rule and keep the question within 512 characters. Do not invent an assessment outcome.

Clarifications

What constitutes sufficient evidence for this criterion?

Official configuration documentation showing two active tunnels with routing tables specifying failover behavior between VPCs and on-premises networks, per AWS documentation (source 5-source-3 p2). Network diagrams or implementation logs may supplement but cannot replace configuration records.

How is missing evidence handled?

Evidence absence results in a 'pending' status requiring documentation review within the assessment period. Temporary unavailability due to operational constraints does not satisfy the criterion until resolved.

References

AWS Site-to-Site VPN Features Documentation

https://docs.aws.amazon.com/vpn/latest/s2svpn/VPC_VPN.html (opens in a new tab)

NIST Special Publication 800-77 Revision 1: Guide to IPsec VPNs

https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-77r1.pdf (opens in a new tab)