Hello community, A few days ago, I had the need to segment internet
traffic for AWS S3 service. I have made a script that includes all
public network segments used by the service in AWS. I hope it will be
you useful.
WAN and LAN tags are more informative and contextual, than functional or
operational. Therefore, if you would like, you could perform a
Site-to-Site VPN on WAN or LAN ports. The problem you have with the VPN
is another, they may be due to negotiation...