View a markdown version of this page

Decision tree on connectivity to RISE - General SAP Guides
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Decision tree on connectivity to RISE

You must establish required connectivity to proceed with RISE with SAP on Amazon. The following are a few connectivity patterns described in the preceding sections:

  • direct to RISE VPC, supported with Site-to-Site VPN (up to 1.25 Gbps per tunnel)

  • connectivity through Customer’s own account or Landing Zone, supported with Site-to-Site VPN large bandwidth option (up to 5 Gbps)

  • connectivity through Customer’s own account or Landing Zone, supported with Site-to-Site VPN large bandwidth option and ECMP (above 5 Gbps)

  • direct to RISE VPC, supported with Direct Connect

  • direct to RISE VPC, supported with VPN over Direct Connect (for in-built traffic encryption)

  • connectivity through your Amazon account via VPC Peering

  • connectivity through Transit Gateway from your owned Amazon account in the same Region

  • connectivity through SAP-managed Transit Gateway in RISE to connect to your TGW in another Region

  • connectivity through Amazon Cloud WAN from your owned Amazon account for global multi-region deployments

You must also consider if you want to connect:

  • directly to an Amazon Region where the RISE with SAP VPC is going to be deployed

  • or through Amazon Local Zone (nearest Amazon Direct Connect POP) to benefit from lower setup and running costs, with the same or lower network latency to connect to your RISE with SAP VPC

The decision tree displayed in the following diagram helps you decide which connectivity is suitable based on your requirements, such as future plan of additional Amazon or RISE accounts, dedicated private connectivity (security, performance), bandwidth needs, and global multi-region deployments.

Decision tree for choosing RISE with SAP connectivity options based on bandwidth
Note

  1. ECMP requires Transit Gateway for S2S VPN.

  2. Direct Connect Gateway is recommended to connect to multiple Amazon regions. This simplifies the connectivity setup and avoids TGW peering between Amazon regions.

  3. Amazon Cloud WAN is recommended for customers planning global multi-region deployments from their owned Amazon account to connect to RISE VPC.

  4. Landing Zone implementation is recommended when connecting through your owned Amazon account with multiple VPCs.