Acquia Cloud Shield Product Guide¶

Last updated: March 29, 2019

Acquia Cloud Shield provides isolated networks for Acquia Cloud Enterprise applications. Customer deployments within an isolated network environment are separated from other customer deployments at the network level. Acquia Cloud Shield includes the product features set forth below.

1. Acquia Cloud Shield access management

   Customers can use self-service IP whitelisting for occasions when they need to manage SSH access to the environments in their subscription.

2. Private IP range with optional VPN connection

   Customers can choose to add an optional Virtual Private Network (VPN) hosted on Acquia Cloud Enterprise to facilitate a connection between Acquia Cloud Enterprise and the customer’s private network. The VPN connection ensures customers have secure bidirectional interaction between their websites and their internal IT systems (such as CRM). Included in the price of Acquia Cloud Shield is the VPN set up between Acquia Cloud Enterprise and one customer-defined gateway device point. Customers can purchase additional VPN connections. They will be charged a setup fee for each one.

   Customers must purchase a subscription to Acquia Cloud Enterprise to enable the VPN.

   In the event the customer changes endpoints during the Subscription Term, the customer will incur additional setup fees, which will be billed to the customer at $250 per hour. In order for Acquia to enable the VPN connection, the customer must meet the technical requirements set forth at http://aws.amazon.com/vpc/faqs/#C9.

3. AWS VPC Peering Connection

   As an alternative to a VPN, customers can choose instead to have one VPC peering connection enabled between their Acquia Cloud Shield VPC and another AWS VPC. Additional VPC peering connections can be enabled. Customers will be charged a setup fee for each one.