A VPG is highly available, with endpoints in two separate AZs so that you can failover from the primary tunnel to the secondary in the case of a temporary outage. You can also configure CloudWatch metrics and alarms to keep you informed about the health of your VPN connection.

You might be wondering about a few of the terms you encountered in this recipe, such as BGP and ASN. We will cover these in the following subsections.