Automatic integration with the Config service simplifies setup and reduces manual configuration. Customers can create Enterprise VPN Gateway associated with an Enterprise Router (ER). Virtual Private Cloud route tables give customers more control over network traffic. Customers can also export peer configuration files from VPN connections, making settings easier to retrieve and share. Public network health checks can be created during connection setup, so monitoring can be configured from the start.

Administrators can query IPSec Security Associations (SAs) to check connection details and investigate issues. When VPN gateway creation fails, the service displays the reason, helping teams troubleshoot more quickly. New VPN APIs are introduced to support API-based provisioning easier and more reliable.

Administrators can configure detailed Enterprise VPN project permissions via new API features, giving more control over VPN resources. The management plane has been optimized for large-scale environments, for example, VPN gateways and connections can be queried page by page to make large lists easier to manage. Administrators can also change VPN connection keys, adjust local and peer subnet quotas, and upgrade VPN gateways.

The new features are available for newly created Enterprise VPN new version gateways. Enterprise VPN gateways, which were created before November 6th 2026, need to go through the upgrade procedure to use the new features and functionalities, as is described here.

For further information about Enterprise VPN please visit: Helpcenter, Upgrade Procedure, Community Blog