Intelligent VPN observability: Decoding AWS Site-to-Site VPN logs

This article presents an automated observability pipeline for AWS Site-to-Site VPN connections that detects anomalies and analyzes BGP and IKE logs using Amazon Bedrock. The serverless architecture uses CloudWatch Logs subscription filters, Amazon SQS FIFO for deduplication, and Amazon SNS for email delivery, covering troubleshooting scenarios like prefix quota violations, AS path loops, connection collisions, and IKE tunnel failures.