Dedicated AWS Direct Connect connections

To create an AWS Direct Connect dedicated connection, you need the following information:

You can't change the port speed after you create the connection request. To change the port speed, you must create and configure a new connection.

You can create a connection using either the Connection wizard or create a Classic connection. Using the Connection wizard you can set up connections using resiliency recommendations. The wizard is recommended if you're setting up connections for the first time. If you prefer, you can use Classic to create connections one-at-a-time. Classic is recommended if you've already got an existing setup that you want to add connections to. You can create a standalone connection, or you can create a connection to associate with a LAG in your account. If you associate a connection with a LAG, it's created with the same port speed and location that is specified in the LAG.

After you request the connection, we make a Letter of Authorization and Connecting Facility Assignment (LOA-CFA) available to you to download or email you with a request for more information. If you receive a request for more information, you must respond within 7 days or the connection is deleted. The LOA-CFA is the authorization to connect to AWS, and is required by your network provider to order a cross connect for you. If you do not have equipment in the AWS Direct Connect location, you cannot order a cross connect for yourself there.

The following operations are available for dedicated connections:

You can add a dedicated connection to a link aggregation group (LAG) allowing you to treat multiple connections as a single one. For information, see Associate a connection with a LAG.

After you create a connection, create a virtual interface to connect to public and private AWS resources. For more information, see Virtual interfaces and hosted virtual interfaces.

If you do not have equipment at an AWS Direct Connect location, first contact an AWS Direct Connect Partner at the AWS Direct Connect Partner Program. For more information, see APN Partners Supporting AWS Direct Connect.

If you want to create a connection that uses MAC Security (MACsec), review the prerequisites before you create the connection. For more information, see MACsec prerequisites for dedicated connections.

Letter of Authorization and Connecting Facility Assignment (LOA-CFA)

After we have processed your connection request, you can download the LOA-CFA. If the link is not enabled, the LOA-CFA is not yet available for you to download. Check your email for a request for information.

The downloaded LoA is digitally signed and watermarked to validate the authenticity of the LoA issued by AWS. The digital signature and watermark in the LoA .The PDF document prevents a modified or potentially fraudulent LoA from being acted upon by the facilities provider at Direct Connect sites. The digital signature can be authenticated by opening the PDF and reviewing the signature panel. A valid document will show the "Signature is valid" and "Document has not been modified since the signature was applied". The watermark repeats the patch panel and strands assigned across the body of the LoA as a visual, but non-secure, indicator of authenticity.

Billing automatically starts when the port is active or 90 days after the LOA has been issued, whichever comes first. You can avoid billing charges by deleting the port prior to activation or within 90 days of the LOA being issued.

If your connection is not up after 90 days, and the LOA-CFA has not been issued, we will send you an email alerting you that the port will be deleted in 10 days. If you fail to activate the port within the additional 10 day period, the port will automatically be deleted and you'll need to restart the port creation process.

For the steps to download the LoA-CFA, see Download the LOA-CFA.