Network architecture for multi-cloud environments
The recommended way to connect to cloud environments is a secure and permanent network connection using a dedicated interconnect (such as AWS Direct Connect, Azure ExpressRoute, or Google Interconnect) for connecting from the on-premises to the cloud or using a site-to-site VPN (either from on-premises to the cloud or between cloud providers).
A secured and permanent connection will allow access control (layer 4 firewall rules) to be set between cloud providers and cloud segments and keep access to resources in the cloud (or allow access to cloud resources) for business needs.
When considering network architecture, you need to think about the following:
- Which resources should be kept private (such as data transfer and backend service-to-service communication)?
- Which resources can be public (such as public API calls, frontend services, and VPN endpoints)?
- How will the network architecture adapt to changes (such...