Individual skill
sitetositevpn
Configures AWS Site-to-Site VPN: creating an IPsec VPN connection between an on-premises network and a VPC, choosing the target gateway (virtual private gateway, transit gateway, or AWS Cloud WAN), choosing static or dynamic (BGP) routing, sizing tunnel bandwidth (Standard 1.25 Gbps or Large 5 Gbps), connecting many sites through a VPN Concentrator, applying the customer gateway device configuration, making a connection highly available, and monitoring tunnels with CloudWatch. Applicable when the user wants to connect a data center or branch office to AWS over an encrypted tunnel, choose how routes are exchanged, scale throughput, consolidate sites, or diagnose a down tunnel. Routes to the right per-task procedure in references. Not for AWS Direct Connect (its own service), Client VPN for individual remote users, the transit gateway side of a VPN attachment (transitgateway skill), or Route 53 DNS work.
skills/specialized-skills/networking-and-content-delivery-skills/sitetositevpn/SKILL.md
Source commit 1761e96813ebcbd43ed81d19e837219033f0afe5
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- Yes
- Repository scan complete
- No
- Skill scan complete
- No
- Observed behavior
- Network or broad shell
- Last checked
- Nov 3, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 3,430
- Repository last updated
- Nov 7, 2026
- License
- Apache-2.0
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- data Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
SKILL.mdcore · 5,413 bytesreferences/applying-the-customer-gateway-device-configuration.mddoc · 11,712 bytesreferences/choosing-static-or-dynamic-routing.mddoc · 11,199 bytesreferences/choosing-tunnel-bandwidth-standard-or-large.mddoc · 12,629 bytesreferences/connecting-many-sites-with-a-vpn-concentrator.mddoc · 12,283 bytesreferences/creating-a-site-to-site-vpn-connection.mddoc · 17,071 bytesreferences/making-a-connection-highly-available.mddoc · 10,563 bytesreferences/monitoring-and-troubleshooting-tunnels.mddoc · 20,124 bytes
Read excerpt
# AWS Site-to-Site VPN
## Overview
Domain expertise for configuring AWS Site-to-Site VPN, the managed service that builds an encrypted
IP Security (IPsec) connection between an on-premises network and AWS. Covers the routing decision
(static versus dynamic (BGP) routing), creating the connection and its dependent resources in the right order,
sizing tunnel bandwidth, consolidating many sites through a VPN Concentrator, applying the customer
gateway device configuration, building for high availability, and monitoring and troubleshooting
tunnels.
This skill is a router. Each customer task maps to a procedure file under `references/`. Read the
matching reference in full before acting, then follow its constraints and steps. The reference
files are self-contained: each carries its own decision tables, constraints, procedure, and