Remote municipal IT admins need encrypted user-level access from laptops into VPC private resources for after-hours support. Site-to-Site VPN already links headquarters, but individual teleworkers are not on that office network. What should the architect provide?
Select an answer to reveal the explanation.
Short Explanation
Headquarters already has a Site-to-Site tunnel; teleworkers need their own secure on-ramp. Client VPN is that per-user tunnel into the VPC—without opening SSH to the whole Internet.
Full Explanation
AWS Client VPN provides managed client-based VPN access for remote users into a VPC, fitting admin telework scenarios separate from Site-to-Site office connectivity. Opening management ports to the world, sharing passwords, or banning remote support are insecure or impractical alternatives.