skills.rest
aws
awsOFFICIAL
Explore all skills by this author →
WebsiteGitHub

directconnect

Configures AWS Direct Connect connections, virtual interfaces, BGP, encryption, and resiliency.

2.5k|282|Updated Apr 23, 2026
Search Tags:#hybrid cloud#AWS#Networking#Direct Connect#BGP#virtual interface#macsec
One-click install
npx skills add https://github.com/aws/agent-toolkit-for-aws --skill directconnect
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: directconnect
Source: https://github.com/aws/agent-toolkit-for-aws/tree/main/skills/specialized-skills/networking-and-content-delivery-skills/directconnect
Command: npx skills add https://github.com/aws/agent-toolkit-for-aws --skill directconnect

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Setting up and operating AWS Direct Connect involves many order-dependent, easy-to-get-wrong decisions: choosing a connection model, creating the right virtual interface type, bringing up BGP, encrypting traffic, and building resiliency. This Skill routes each Direct Connect task to a vetted per-task procedure so configuration mistakes that drop production traffic are avoided.

Core Features & Use Cases

  • Connection Provisioning: Choose between dedicated, hosted, or link aggregation group models, complete the cross connect, and create private, public, or transit virtual interfaces with BGP.
  • Multi-VPC and Cross-Account Connectivity: Reach many VPCs through a Direct Connect gateway, including the cross-account transit gateway proposal-and-acceptance handshake.
  • Encryption and Hardening: Encrypt traffic with MACsec or a private IP Site-to-Site VPN, and apply least-privilege IAM, CloudTrail auditing, and CloudWatch monitoring.
  • Resiliency and Migration: Build resiliency models with the Resiliency Toolkit, tune failover with BFD, manage link aggregation groups, set up SiteLink, and migrate from a virtual private gateway to a transit gateway without dropping traffic.
  • Use Case: A network engineer needs to connect a data center to 15 VPCs across two accounts. The Skill routes them through creating a transit virtual interface, associating a Direct Connect gateway with a transit gateway via the cross-account handshake, and setting allowed prefixes.

Quick Start

Ask the agent to help you set up a new AWS Direct Connect dedicated connection and create a private virtual interface to your VPC.

Frequently Asked Questions about directconnect

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I set up an AWS Direct Connect connection?▼

Choose a connection model first: dedicated (your own port at 1-400 Gbps), hosted (partner-provisioned, sub-1 Gbps up to 25 Gbps), or a link aggregation group. For dedicated connections, request it in the console, download the LOA-CFA, and hand it to your network provider for the cross connect.

What is the difference between private, public, and transit virtual interfaces?▼

A private virtual interface reaches a VPC over private IPs, a public virtual interface reaches public AWS service endpoints, and a transit virtual interface reaches transit gateways for multi-VPC topologies. The type is fixed at creation and cannot be changed later.

Is AWS Direct Connect traffic encrypted?▼

No, Direct Connect does not encrypt traffic in transit by default. You must add encryption separately using MACsec (Layer 2, on 10/100 Gbps dedicated connections) or a private IP Site-to-Site VPN over a transit virtual interface.

Why is my Direct Connect BGP session not coming up?▼

The most common cause is an MD5 authentication key mismatch, including trailing spaces. Also check VLAN tag mismatches, wrong ASN or peer IPs, Layer 2 trunking issues on intermediate devices, and physical layer problems like transceiver mismatches.

How do I connect multiple VPCs to one Direct Connect connection?▼

Use a Direct Connect gateway associated with either virtual private gateways (up to 20) or transit gateways (up to 6). For transit gateways, you must set allowed prefixes and use distinct ASNs, and cross-account setups require a proposal-and-acceptance handshake.

When should I not use this Direct Connect skill?▼

Do not use it for transit gateway route tables and attachments (use the transitgateway skill), standalone Site-to-Site VPN without Direct Connect (use the sitetositevpn skill), or Route 53 DNS routing (use the route53 skill).

Related Skills

Explore More Software Engineering Skills→
cuoreinpacecuoreinpace

hybrid-cloud-networking

Configure VPN and dedicated connections between on-premises networks and AWS, Azure, or GCP.

Community
Advanced
agents-infrastructureagents-infrastructure
7

alicloud-vpc

Manage Alibaba Cloud VPCs, VSwitches, route tables, and NAT gateways.

Official
Advanced
mreferremreferre

setting-up-cloudtrail-multi-region

Configure multi-region AWS CloudTrail trails with S3 and CloudWatch Logs delivery.

Community
Advanced
3commas-io3commas-io
4

hybrid-cloud-networking

Configure VPNs and dedicated connections between on-premises networks and cloud platforms.

Official
Advanced