For those that have replied - thank you for taking the time to answer.    However, if you are not familiar with AWS native site-to-site VPNs, they do not expose a FQDN, any username, or the internal IP of the AWS VPN connection.  We have tried the public IP, the VPN ID (which is not a FQDN), and 0.0.0.0, to no avail.    Just today I see that AWS now has a configuration listed for MX 15.12+ however, the configuration still does not contain any information about the local ID of the AWS side - here is a redacted extract of the configuration file:   ! Amazon Web Services ! Virtual Private Cloud ! AWS utilizes unique identifiers to manipulate the configuration of ! a VPN Connection. Each VPN Connection is assigned an identifier and is ! associated with two other identifiers, namely the ! Customer Gateway Identifier and Virtual Private Gateway Identifier. ! Your VPN Connection ID : vpn-redacted ! Your Virtual Private Gateway ID : vgw-redacted ! Your Customer Gateway ID : cgw-redacted ! This configuration consists of two tunnels. Cisco Meraki is a Policy based VPN device and it doesn't support ! Active/Standby setup with AWS hosted VPN solution. You can configure only one of the two tunnels as active. ! -------------------------------------------------------------------------------------------------------------------- ! IPSEC Tunnel #1 ! -------------------------------------------------------------------------------------------------------------------- ! A policy is established for the supported ISAKMP encryption, authentication, Diffie-Hellman, lifetime, ! and key parameters.The IKE peer is configured with the supported IKE encryption, authentication, Diffie-Hellman, lifetime, and key ! parameters.Please note, these sample configurations are for the minimum requirement of AES128, SHA1, and DH Group 2. ! Category "VPN" connections in the GovCloud region have a minimum requirement of AES128, SHA2, and DH Group 14. ! You will need to modify these sample configuration files to take advantage of AES256, SHA256, or other DH ! groups like 2, 14-18, 22, 23, and 24. ! NOTE: If you customized tunnel options when creating or modifying your VPN connection, you may need to modify these sample configurations to match the custom settings for your tunnels. ! ! Higher parameters are only available for VPNs of category "VPN," and not for "VPN-Classic". ! The address of the external interface for your customer gateway must be a static address. ! Your customer gateway may reside behind a device performing network address translation (NAT). To ! ensure that NAT traversal (NAT-T) can function, you must adjust your firewall ! rules to unblock UDP port 4500. | If not behind NAT, and you are not using an Accelerated VPN, we recommend disabling NAT-T. If you are using an Accelerated VPN, make sure that NAT-T is enabled. On the Cisco Meraki Dashboard, go to Security Appliance --> Configure --> Site-to-Site VPN Local networks: Select "yes" under "Use VPN" for the subnet you want to include in the source encryption domain. ! AWS hosted VPN solution is a route-based solution, since Cisco Meraki only supports policy-based solution you will need to limit to a single SA. So please make sure to ! select "yes" for just one subnet, if you have more than one subnet, consolidate them into a single subnet before proceeding with the VPN configuration. Under Organization-wide settings --> Non-Meraki VPN peers Name: ipsec-vpn-redacted-0 Public IP: redacted Private subnets: <vpc_subnet>/<vpc_subnet_mask> IPsec policies: Click “Default”, select “AWS” under the Preset menu and "Update" Preshared secret: redacted Availability: All networks ! To bring up the VPN tunnel, interesting traffic should be initiated from a host behind Cisco Meraki. Use the "ping" command with the instance's private IP address. ! ping <EC2 instance's private IP address> source <on-premise host IP address>   So at this point I am still not sure what to use for the Remote ID on the Meraki side for the VPN tunnel. If anyone has had success with this please let me know how you configured the Meraki Remote ID.    Again thank you for your replies. ... View more