VPN endpoint or site to site VPN?

VPN
1

Hey, I try to find which solution is better and cheaper for my company needs.

Today, we’re using Forti router that connect to AWS with site to site VPN so all the employees can connect from the office to AWS services and when they work from home they connect with Forti VPN to the office, which let them access to AWS services.

For backup, we create AWS VPN endpoint in case of connection issues to the office or lack of access to solve the issue.

I’m not sure if one of them is cheaper than the other, on both we use split tunnel, so only the relevant request will go to the VPN.

​

There is any reason to keep using the Forti VPN over the VPN endpoint in AWS?

2

We need to choose if we want to update to a new router because the current one is old and not satisfied our needs.
Also I already created the endpoints as backup, the Forti is one point failure, I need a backup anyway.

My questions os more about the finance dissection because Amazon not very clear about prices from what I can tell.

If it cheaper and more robust is a win for me, if it more expensive I still use it as a backup on downtime.