Turn AWS Site-to-Site VPN tunnel endpoint lifecycle control off - AWS Site-to-Site VPN

Turn AWS Site-to-Site VPN tunnel endpoint lifecycle control off

If you no longer want to use the tunnel endpoint lifecycle control feature, you can turn it off using the AWS Management Console or the AWS CLI. When you turn off this feature, AWS will automatically deploy maintenance updates periodically, and these updates might happen during your business hours. To avoid any business impact, we highly recommend that you configure both tunnels in your VPN connection for high availability.

Note

While there is an available pending maintenance, you cannot specify the skip tunnel replacement option while turning the feature off. You can always turn the feature off without using the skip tunnel replacement option, but AWS will automatically deploy the available pending maintenance updates by initiating a tunnel endpoint replacement immediately.

To turn off tunnel endpoint lifecycle control using the AWS Management Console

  1. Open the Amazon VPC console at https://console.aws.amazon.com/vpc/.

  2. In the left-side navigation pane, choose Site-to-Site VPN Connections.

  3. Select the appropriate connection under VPN connections.

  4. Choose Actions, then Modify VPN tunnel options.

  5. Select the specific tunnel that you want to modify by choosing the appropriate VPN tunnel outside IP address.

  6. To turn off tunnel endpoint lifecycle control, under Tunnel Endpoint Lifecycle Control, clear the Enable check box.

  7. (Optional) Select Skip tunnel replacement.

  8. Choose Save changes.

To turn off tunnel endpoint lifecycle control using the AWS CLI

Use the modify-vpn-tunnel-options command to turn off tunnel endpoint lifecycle control.