Shield Product Guide¶

1. Shield access management¶

Customers can use self-service IP allowlisting for occasions when they need to manage SSH access to the environments in their subscription.

2. Private IP range with optional VPN connection¶

Customers can choose to add an optional Virtual Private Network (VPN) hosted on Cloud Platform Enterprise to facilitate a connection between Cloud Platform Enterprise and the customer’s private network. The VPN connection ensures customers have secure bidirectional interaction between their websites and their internal IT systems (such as CRM). Included in the price of Shield is the VPN set up between Cloud Platform Enterprise and one customer-defined gateway device point. Customers can purchase additional VPN connections. They will be charged a setup fee for each one.

Customers must purchase a subscription to Cloud Platform Enterprise to enable the VPN.

In the event the customer changes endpoints during the Subscription Term, the customer will incur additional setup fees, which will be billed to the customer at $250 per hour. In order for Acquia to enable the VPN connection, the customer must meet the technical requirements set forth at http://aws.amazon.com/vpc/faqs/#C9.

3. AWS VPC Peering Connection¶

As an alternative to a VPN, customers can choose instead to have one VPC peering connection enabled between their Shield VPC and another AWS VPC. Additional VPC peering connections can be enabled. Customers will be charged a setup fee for each one.