MACsec (Media Access Control Security) is a Layer 2 encryption standard that can be enabled on AWS Direct Connect dedicated connections. Requesting MACsec ports ensures that the new connections support encryption at the physical layer.

MACsec requires a CKN and CAK pair to establish encrypted communication between the on-premises routers and the AWS Direct Connect routers. This ensures the encryption keys are securely shared and recognized by both endpoints.

To enable MACsec on the Direct Connect link, the on-premises routers must be configured to use the same CKN and CAK. This ensures secure communication and proper encryption over the connection.