AWS service for connecting networks and users to a VPC over encrypted connections across the internet. It has two variants: AWS Site-to-Site VPN, which connects an on-premises network to a VPC through IPsec tunnels to a Virtual Private Gateway or a Transit Gateway, and AWS Client VPN, for remote access by individual users.
In CLF-C02 and SAA-C03 it is compared with AWS Direct Connect: a VPN is set up in minutes and travels encrypted over the internet (lower cost, but variable bandwidth and latency); Direct Connect is a dedicated private connection. A VPN can also back up Direct Connect. It is the equivalent of Azure VPN Gateway. Question: connect the office to a VPC quickly and at low cost → AWS Site-to-Site VPN.
AWS VPN is a concept that can show up on the exam. Check the full guide to see it in context.